The personal data of millions of Sberbank clients, as reported by the Kommersant newspaper, ended up on the black market. Sberbank itself has already confirmed a possible information leak.
According to available information, the data of 60 million Sberbank credit cards, both active and closed (the bank now has about 18 million active cards), fell into the hands of online fraudsters. Experts are already calling this leak the largest in the Russian banking sector.
βOn the evening of October 2, 2019, Sberbank became aware of a possible leak of credit card accounts. An internal investigation is currently underway and its results will be reported additionally,β reads the official notice from Sberbank.
Presumably, the leak could have occurred at the end of August. Advertisements for the sale of this database have already appeared on specialized forums.
βThe seller offers potential buyers a trial fragment of the database of 200 lines. The table contains, in particular, detailed personal data, detailed financial information about the credit card and transactions,β writes Kommersant.
Preliminary analysis shows that the database offered by the attackers contains reliable information. Sellers value each line in the database at 5 rubles. Thus, for 60 million records, criminals can theoretically receive 300 million rubles from just one buyer.
Sberbank notes that the main version of the incident is the deliberate criminal actions of one of the employees, since external penetration into the database is impossible due to its isolation from the external network.
Experts say the consequences of such a large-scale leak will be visible throughout the financial industry. At the same time, Sberbank assures that βthe stolen information in any case does not threaten the safety of clientsβ funds.β
Source: 3dnews.ru