France's FICOBA national bank-account file accessed with a stolen official's credentials; about 1.2 million accounts exposed

France's DGFiP said that from late January 2026 a malicious actor used the stolen credentials of an official with inter-ministry access to consult the FICOBA file, which lists all bank accounts opened in France ^[1]. Access was immediately restricted; the data consulted or extracted is estimated to involve 1.2 million accounts, tax identifiers were not consulted, and the finance ministry contacted banks to urge customers to be vigilant ^[1][2]. The tax authority never asks for credentials or card numbers by message; verify suspicious messages by contacting your tax office via your account's secure messaging or by phone ^[1].

Industries mainly affected: Finance, Government

1. Do not answer messages asking for credentials or card numbers; the tax authority never asks by message ^[1].
2. Verify suspicious messages via your tax account's secure messaging or by phone .