Published on · Italy
TeamSystem customer IBANs stolen: the real risk is the email that changes the bank details
From the afternoon of 24 August 2026 someone got into Contabilità in Cloud, the accounting software of Italian company TeamSystem, and took the data customers had stored in it: personal details, contacts and IBANs. The most likely damage now is not the theft itself, but the fake emails that this data makes believable.
In 30 seconds
- From 24 August 2026 someone took personal details, contacts and IBANs from TeamSystem's Contabilità in Cloud software.
- With that data, fake «new bank details» emails become believable.
- The rule: no payment to a new IBAN without a call to the number you already have.
- When
- From the afternoon of 24 August 2026
- Where
- TeamSystem's Contabilità in Cloud (Italy)
- How they got in
- Not made public
- What they took
- Personal details, emails, phone numbers, IBANs
What happened
TeamSystem, which supplies business software to many Italian companies, told its customers that from the afternoon of 24 August 2026 it had detected unauthorised access to its Contabilità in Cloud software, with theft of the personal data stored in it.
According to Italian news outlets Sky TG24 and Adnkronos, the stolen data includes personal details, bank details (IBANs), email addresses and phone numbers. The number of customers affected has not been disclosed.
How they got in
It has not been made public. When it is, we will update this article.
The risk that comes next
Italy's National Cybersecurity Agency, asked by Adnkronos, pointed to the main risk: phishing campaigns for financial fraud, such as IBAN swapping. It works like this: an email arrives that looks like it comes from a real supplier, with the right name, the right details and the right tone, saying their bank details have changed. The next payment ends up in the fraudsters' account.
With data stolen from business software these emails become far more convincing, because the fraudsters know who pays whom.
What to check in your business today
- Check every request to change an IBAN, from a supplier or a customer, with a phone call to the number you already have on file. Never the one written in the email.
- Set a written rule in your company: no payment to a new IBAN without that call, even if the email seems to come from the boss.
- Turn on two-step verification for every cloud tool you use: accounting, invoicing, banking, email.
- Ask your software suppliers how they would notify you of a breach and what data of yours they keep.