A recent cyberattack on the French telecom operator Free compromised the personal data of millions, including bank identifiers (Iban). Experts warn that these identifiers can be exploited for unauthorized purchases, as demonstrated by journalists successfully using one another’s Ibans to complete transactions without verification. The incident raises significant questions about the responsibilities of banks and payment recipients in verifying identity during financial transactions. Recommendations include monitoring bank accounts and using ‘whitelist’ and ‘blacklist’ methods with banks to manage transaction permissions.

Source