Loading story…
CAF Bank suspended its online banking service after detecting suspicious activity on some customer accounts and uncovering a previously undetected vulnerability in the connection between third-party software and its online banking portal. The bank said the issue prompted attempted fraud alerts to affected customers, while stressing that its core banking systems were not impacted and customer funds remained secure.
The outage has left online access unavailable since July 24 and disrupted operations for some of the roughly 14,000 charities and organizations the bank serves, including difficulties processing time-sensitive payments such as payroll. CAF Bank said it is working with its technology partner and external experts to remediate the flaw before restoring service, while continuing to handle urgent transactions and customer support by phone.
See the actors and campaigns active against you right now.
1 event from the most recent confirmed update back to the earliest known activity.
CAF Bank suspended its online banking services after receiving reports of suspicious activity on some customer accounts and identifying a previously undetected vulnerability in the connection between third-party software and its online banking portal. The bank said core banking systems were unaffected, customer funds remained safe, and phone support would continue for urgent payments.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
5 references tracked. Mallory keeps watching after this page renders.
theregister.com
Open sourcescworld.com
Open sourcetheregister.com
Open sourcetheregister.com
Open sourcetheregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CAF Bank has restored its online banking service after an outage lasting more than 10 days that followed attempted fraud on a small number of accounts and a separate attack designed to remove some users' online logins. The bank said it first detected fraudulent activity on July 21, temporarily suspended online access on July 22 and July 24, and later identified additional malicious activity on July 25. Its investigation found a previously unknown vulnerability in third-party software connected to the online banking portal. The bank said its core banking systems were not affected and that customer funds remained secure, but warned that online access could remain intermittent as it manages traffic during recovery. The disruption caused concern among charity customers that rely on the bank to pay staff and suppliers, and added to frustration over the reliability of its newer online platform. CAF Bank said it will waive monthly account charges for August and September as a goodwill measure.
Aug 5, 2026
Community Bank disclosed a security incident after customer information was exposed through use of an unauthorized AI-based software application, according to a filing with the U.S. Securities and Exchange Commission. The bank said the compromised non-public data included customer names, dates of birth, and Social Security numbers, and that it reported the matter because of the volume and sensitivity of the information involved. Reporting indicates the lapse may have occurred when customer data was uploaded to an online AI chatbot or similar service, though the bank has not identified the application or explained the exact mechanism. The bank said the incident did not disrupt operations or prevent customers from accessing accounts or payment services, but it is still assessing the scope of affected data and notifying impacted individuals as required by law. Community Bank is also communicating with banking and financial regulators and pursuing remediation to prevent a recurrence. The number of affected customers remains undisclosed.
Jun 29, 2026
France’s Ministry of the Economy and Finance confirmed that an attacker **accessed and consulted data tied to ~1.2 million French bank accounts** by using **stolen login credentials** belonging to an authorized government user of the national bank account registry (*FICOBA*). The intrusion began in **late January 2026** and exposed account-linked personal data including **IBANs**, account holder **names**, **addresses**, and in some cases **tax identification numbers** (DGFiP-issued). Authorities stated the access did **not** enable viewing balances or initiating transactions. After detection, the ministry reported it **blocked the attacker**, notified France’s data protection authority (**CNIL**), and **filed a criminal complaint**; impacted individuals are expected to be contacted directly, and **banks were alerted** to advise customers to remain vigilant. Reporting noted the incident follows other recent cyber disruptions affecting French public services (including attacks impacting **La Poste/La Banque Postale** and the **Interior Ministry**), though no motive or attribution for the FICOBA access has been publicly confirmed.
Jun 29, 2026