France’s DGFiP confirmed illegitimate access to FICOBA, exposing IBANs and identities for ~1.2m accounts. The breach spotlights crypto’s off-chain attack surface.