The accounts of some 400,000 customers at Italy's largest bank have been hacked, with the loss of data on personal loans, but not account passwords.
The bank, UniCredit, said Wednesday that the hackers breached the system through an unidentified external commercial partner.
The system was first compromised last September and October, followed by incursions in June and July. The first breach was not previously disclosed.
The bank said no passwords appear to have been jeopardized, but that personal data, including names and birthdates, along with IBAN numbers "might have been accessed."
The bank said it was filing a criminal complaint with prosecutors and is taking action to close the breach. It emphasized that it had previously earmarked 2.3 billion euros ($2.7 billion) to upgrade its IT systems.
This content appears as provided to The Globe by the originating wire service. It has not been edited by Globe staff.