The seller, a threat collective known as ShinyHunters, claims to have financial data linked to 30 million existing Santander customers, including their credit card details.
Santander confirmed it had suffered a cyber incident on 14 May 2024, reporting to Spain's National Securities Market Commission that there had been 'unauthorized access to a database hosted by a third-party provider'.
No transactional data, access credentials, or mobile banking passwords that could be used to authorize transactions from the bank were accessed, according to Santander.
In the listing posted by ShinyHunters, the group claims to be selling bank account details associated with 30 million people, 6 million account numbers, 28 million credit card numbers, and HR information linked to Santander staff.
[
add
]
[
|
|
...
]