MILAN — The accounts of some 400,000 customers at Italy’s largest bank have been hacked, with the loss of data on personal loans, but not account passwords.

The bank, UniCredit, said Wednesday that the hackers breached the system through an unidentified external commercial partner.

The system was first compromised last September and October, followed by incursions in June and July. The first breach was not previously disclosed.

The bank said no passwords appear to have been jeopardized, but that personal data, including names and birthdates, along with IBAN numbers “might have been accessed.”

The bank said it was filing a criminal complaint with prosecutors and is taking action to close the breach. It emphasized that it had previously earmarked 2.3 billion euros ($2.7 billion) to upgrade its IT systems.

Author photo
The AP is one of the largest and most trusted sources of independent newsgathering. AP is neither privately owned nor government-funded; instead, as a not-for-profit news cooperative owned by its American newspaper and broadcast members, it can maintain its single-minded focus on newsgathering and its commitment to the highest standards of objective, accurate journalism.