Data breach of 1.2 million bank accounts in France

The national file of bank accounts in France was subjected to a major security breach, as an electronic hacker was able, since the end of January 2026, to access the data of 1.2 million accounts, taking advantage of an employee’s login data and the lack of a two-factor verification system to secure the accounts.
The French Ministry of Economy revealed that investigations conducted by the General Directorate of Public Finance proved that there was “illicit access to the national file of bank accounts,” which includes all bank accounts opened in French financial institutions.
The attacker was able to view personal information related to the accounts, such as the account holder’s name and address, RIB and IBAN bank account information, and in some cases his tax ID.
This data is extremely valuable for electronic fraud, such as phishing attacks, while the General Directorate of Public Finance confirmed that the file does not contain account balances and does not allow any financial operations.