Concise Cybersecurity Intelligence for Decision-Makers
A Credential Compromise That Exposed 1.2 Million Financial Records - In February 2026, France’s national bank account registry (FICOBA), a core component of the country’s financial oversight infrastructure was compromised through a single internal credential. The breach exposed approximately 1.2 million bank account records, including account holder names, account numbers, postal addresses, IBAN/RIB details, and in some cases taxpayer identifiers.
There was no confirmed ransom demand. But the implications are far more strategic than financial loss alone.
FICOBA is not a single bank. It is a centralised national registry of banking and financial accounts used for regulatory, tax, and oversight purposes. When a commercial bank is breached, the impact is contained within that institution. When a national registry is accessed, the impact spans multiple financial institutions, millions of individuals and businesses, regulatory confidence and national financial infrastructure trust.
Download our Full Cyber Insights Brief on this massive data breach which contains:
- Detailed attack analysis
- Tactical breakdown of access methods
- Regulatory and legal context
- Impact assessment across national infrastructure
- Executive-level takeaways for financial institutions and regulators
Disclaimer: This document has been created with the sole purpose of encouraging discourse on the subject of cybersecurity and good security practices. Our intention is not to defame any company, person or legal entity. Every piece of information mentioned herein is based on reports and data freely available online. Cyber Management Alliance neither takes credit nor any responsibility for the accuracy of any source or information shared herein.
We offer a host of courses including our NCSC Assured Training in Cyber Incident Planning and Response and our NCSC Assured Training in Building and Optimising Incident Response Playbooks.
Hands On, full-support 'Security As a Service', specifically designed for organisations that require access to experienced cybersecurity, governance, risk and compliance professionals.
A unique, affordable, subscription-based, cybersecurity service for small to medium businesses, offering 280+ services in cybersecurity.
Scenario-based, verbally-simulated tabletop attack exercises that test your organisation's ability to effectively respond to a cyber-attack.