“The tax authority will never ask for your login credentials or your bank card number by text message.”
The Ministry of the Economy and Finance reiterates this warning following unauthorized access to the national file of bank accounts (FICOBA).
A malicious actor impersonated the credentials of a civil servant who had access as part of inter-ministerial information exchange. Starting in late January 2026, they were able to consult a portion of FICOBA. The file contains personal data: banking details, the account holder’s identity, and, in some cases, a tax number.
Bercy says 1.2 million accounts are affected. It promises to notify each account holder individually “in the coming days.”
Further reading:
France Travail incurs a €5 million fine for a massive cyber vulnerability (January 2026)
Cyberattack at the Ministry of the Interior: sensitive files accessed (December 2025)
How a cyberattack paralyzed 23,000 health professionals (November 2025)
Tax administration: with its IT systems, the state is making its task harder
“Governing my real estate assets”: this major IT project at Bercy that blew up its budget
