Question 13264 — banks and financial institutions

Summary

Mr. Hadrien Clouet questions the Minister of the Economy, Finance and Industrial, Energy and Digital Sovereignty about the extremely serious failure of his ministry's computer data protection systems, opening the way to a hacking of the national bank account file (FICOBA). Thus, the leak of data concerning at least 1.2 million bank accounts puts as many citizens at risk. The investigation by agents of the General Directorate of Public Finances (DGFiP) indicates that this data was consulted and misused from the end of January 2026, using the connection credentials of a ministry official. All transparency must be made on this matter. This attack is reminiscent of that carried out against the Ministry of the Interior between December 11 and 16, 2025. The CNIL then indicated that two police files had been illegally consulted: the processing of criminal records (TAI) which includes 17 million people - perpetrators and victims of crimes and offenses - as well as the wanted persons file (FPR). Among the misused data are bank details (RIB and IBAN), the full identities of account holders (surnames, first names, dates of birth, addresses, emails, telephone numbers, tax identifier). This data can be used or resold and victims can have their identity stolen. Every year, in the country, thousands of people are already victims of this scourge which destroys their lives. Such a data leak due to state failure can only accelerate the phenomenon. If the ministry's services trivialize the situation by claiming that no funds can be misappropriated, the experts formally contest this analysis. THE informations volées suffisent à demander l'exécution de prélèvements pour un donneur d'ordres enregistré comme émetteur auprès d'un prestataire de service de paiements. In addition, the thief can produce a fraudulent direct debit order. Finalement, une souscription de biens ou de services peut être aussi payée par prélèvement, à partir d'un IBAN volé - donc aux frais de la victime. He therefore asks him if his services have identified the accounts concerned by this hack, how he intends to inform the people affected and what measures he will put in place to strengthen the security of his ministry's information system (IS).

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.