Cyberattacks are more numerous than ever. Over the past few days, Free has been in the eye of the storm and has suffered the wrath of a hacker. The operator was the victim of a cyberattack on an unprecedented scale: 19 million customer data ended up for sale on the dark web, including 5 million IBANs.
Free’s lax reaction seems to have annoyed the cybercriminal behind this attack. Thus, a few days later, 100,000 IBANs were distributed free of charge on what is described as “the Amazon of cybercrime”. If you are a Free customer, you must have received several emails to confirm the attack. For those who are unfortunately affected, the operator must have already informed you.
What are the consequences if your IBAN is found on the dark web? It’s a legitimate question. Especially right now, when cyberattacks are on the rise and no company seems spared.
What to do if your IBAN has been stolen?
The IBAN is the international identifier of your bank account, allowing you to carry out international transactions as well as direct debits and SEPA transfers. It is therefore essential. You should in particular be wary of the fake bank advisor scam. Having your IBAN, some hackers pose as an advisor who needs to validate personal information for X or Y reason. In this way, you bring the wolf into the fold, possibly providing him with information he needed. Remember that your banker will never ask you to confirm such sensitive information, particularly by telephone.
If a malicious person has your IBAN and other personal data, such as your BIC code, they can create false direct debit authorizations and treat themselves to a subscription (to Netflix, for example) at your expense. If the direct debit was not authorized, you have the option of acting with your bank to be reimbursed. You must therefore keep your eyes open.
Therefore, it is crucial to ensure that none of your personal data (postal address, telephone number) circulates on the dark web because by crossing it with your IBAN, a cybercriminal can do even more damage.
Victims of the Free cyberattack must change the password of their Free account, monitor possible SEPA mandates on their bank account and be wary of calls, SMS and emails which could be fraudulent.