The national bank accounts file of the DGFiP was accessed for sixteen days.

Omissions

• The MEP did not specify the dates of the intrusion (28 January to 13 February 2026), which would have provided fuller context.
• The MEP did not mention that the breach affected approximately 1.2 million bank accounts out of roughly 300 million managed by FICOBA, nor that it was enabled by stolen credentials of a civil servant.
• The official government press release (presse.economie.gouv.fr) and Banque de France statement could not be fully opened to confirm the 16-day figure directly from a primary source, though multiple independent secondary sources corroborate it.

Sources

• PrimaryMinistère de l'Économie (Presse)Des investigations menées par la Direction Générale des Finances publiques (DGFiP) ont permis d'identifier des accès illégitimes au fichier national des comptes bancaires (FICOBA).
• SecondaryGénération NTL'attaque, rendue possible par l'usurpation des identifiants d'un fonctionnaire, a permis à un pirate de consulter pendant 16 jours des données du fichier national des comptes bancaires (FICOBA).
• SecondaryHelp Net SecurityIn late January 2026, a malicious intruder accessed France's national bank account registry, FICOBA, enabling them to view information tied to 1.2 million bank accounts. The intrusion lasted until mid-February 2026.
• SecondaryFibo Crypto (FR)FICOBA hacked: an attacker accessed France's national bank account registry for 16 days (Jan 28 – Feb 13, 2026) using a stolen civil servant's credentials.