Euskal Moneta Reports Cyberattack; Personal Data Exposure Possible, No Exfiltration Confirmed

Summary

Euskal Moneta says attackers compromised its infrastructure on August 17, 2026. Personal data may have been accessible, but no copying or exfiltration is confirmed. The association rebuilt its systems, notified members, and reported the incident to France’s CNIL.

Key points

• Euskal Moneta says it detected an attack on August 17, 2026, that compromised its IT infrastructure.
• The organization says attackers gained significant access, so consultation or copying of personal data cannot be ruled out.
• No copying, exfiltration, or use of personal data has been established; access to bank details reportedly stored on the systems is also unconfirmed.
• The attack’s method, duration, precise access level, and the number of people whose data may have been accessible remain unknown.
• Initial reporting suggests the attackers may have sought to exploit Euskal Moneta’s domain to improve another site’s search ranking, rather than target members’ data; this remains an unconfirmed account.
• Euskal Moneta says it secured and rebuilt its infrastructure, notified members, and reported the incident to France’s CNIL.
• About 6,000 users and businesses in the network were reportedly informed on August 27, 2026.