InfoSecBulletin Cybersecurity for mankind

The French national bank account registry was breached in late January 2026, with a potential exposure of 1.2 million accounts, according to a press release. A threat actor stole credentials from an official to access a database of bank accounts at French banks. The compromised data might include: Bank account …

PayPal announced a data breach due to a coding error in its Working Capital loan app, which exposed customers’ personal information for about six months, from July 1, 2025, to December 13, 2025. The company found unauthorized exposure on December 12, 2025, and informed affected customers in a letter dated …

A 19 February 2026 FBI FLASH (FLASH-20260219-001) alerts banks and ATM operators about an increase in “jackpotting,” where criminals use malware to steal cash from machines without actual transactions, becoming a widespread issue in the U.S. The alert focuses on Ploutus, an ATM-targeting malware family that abuses eXtensions for Financial …