If I understand you correctly, the fraudsters are just trying to push transactions through using numbers generated off your BIN with the hope of getting some money. IMO, it's not reportable as a cyber incident as it's not disrupting your system like a DDOS attack nor does it sound like any of your data is compromised.