TeamSystem Says Contabilità in Cloud Breach Exposed Customer IBANs and Personal Data
Summary
TeamSystem says attackers accessed and exfiltrated Contabilità in Cloud customer data, including personal details, IBANs and accounting records. The company says passwords were not compromised; the entry method and number of affected accounts remain unknown.
Key points
- TeamSystem said it detected unauthorized access and data exfiltration beginning August 24, 2026, and notified customers on August 26.
- The affected Contabilità in Cloud service is used by businesses and self-employed professionals for invoicing, accounting and tax compliance.
- The company said exposed data included customer identity and contact details, IBANs, and accounting transaction histories.
- TeamSystem said user credentials and passwords were not compromised.
- The initial access method, any exploited vulnerability, the volume of stolen data and the number of affected accounts have not been disclosed.
- No ransom demand or public claim of responsibility had been reported at the time of the article.
- The article warns that the exposed financial and business relationship details could support tailored phishing and payment-redirection fraud.
Article Details
- Victim Organization
- TeamSystem
- Incident Type
- Unauthorized access to Contabilità in Cloud and exfiltration of personal and accounting data
- Incident Date
- 2026-08-24
- Disclosure Date
- 2026-08-26
- Data Types Exposed
- Customer personal and identifying information
- Contact details, including email addresses and phone numbers
- Bank account details, including IBANs
- Accounting transaction history, including descriptions and amounts
- Affected Records
- Unknown; the number of affected profiles was not disclosed.
- Affected Data Size
- Unknown; the quantity of data taken was not disclosed.
- Operational Impact
- Unauthorized access and data exfiltration from Contabilità in Cloud. TeamSystem said user credentials and passwords were not compromised.
- Ransom Or Extortion
- No ransom demand or claim of responsibility had been reported at the time of the article.
- Claim Status
- confirmed