<\/div>\n

The threat actor ShinyHunters claims breach of Santander and is offering for sale bank data, including information for 30 million customers.<\/h2>\n\n\n\n

A notorious threat actor ShinyHunters is offering a huge trove of data allegedly stolen from the Santander<\/a> Bank for sale. ShinyHunters claims to have stolen information for 30 million customers, employees, and bank account data.<\/gwmw><\/p>\n\n\n\n

In mid-May, the Spanish financial institution Santander disclosed a data breach<\/strong><\/a> involving a third-party provider that affected customers in Chile, Spain, and Uruguay. The bank became aware of unauthorized access to one of its databases hosted by a third-party provider.<\/p>\n\n\n\n

The company announced that it immediately implemented measures to contain the incident. The company blocked the compromised access to the database and established additional fraud prevention controls to protect affected customers.<\/p>\n\n\n\n

\u201cWe recently became aware of an unauthorized access to a Santander database hosted by a third-party provider.\u201d reads the statement<\/strong><\/a> published by the bank. \u201cFollowing an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander employees of the group had been accessed. Customer data in all other Santander markets and businesses are not affected.\u201d<\/p>\n\n\n\n

The compromised database contained information on all current and some former employees. <\/p>\n\n\n\n

The bank pointed out that the database did not store transactional data, online banking details, passwords, or other data that would allow someone to conduct transactions. <\/p>\n\n\n\n

\u201cNo transactional data, nor any credentials that would allow transactions to take place on accounts are contained in the database, including online banking details and passwords. The bank\u2019s operations and systems are not affected, so customers can continue to transact securely.\u201d continues the statement.<\/p>\n\n\n\n

The financial institution hasn\u2019t provided technical details of the incident or what kind of data was exposed. It\u2019s unclear how many individuals are impacted.<\/gwmw><\/p>\n\n\n\n

ShinyHunters is the current administrator of BreachForums<\/a>, the cybercrime forum that recently resurrected two weeks after a law enforcement operation that\u00a0seized its infrastructure.<\/p>\n\n\n\n

ShinyHunters claimed the hack of Ticketmaster and offered for sale 1.3 TB of data, including full details of 560 million customers, for $500,000. Stolen data includes names, emails, addresses, phone numbers, ticket sales, and order details.<\/p>\n\n\n\n

On May 30, 2024, ShinyHunters published an announcement titled: “Santander Bank Data – Spain, Chile, Uruguay – Customers, CC, Bank, more” that claims country affected are Spain, Chile, and Uruguay.<\/p>\n\n\n\n

Data contains<\/p>\n\n\n\n

\n
• 30 million customers data<\/li>\n\n\n\n
• 6 million account numbers and balances<\/li>\n\n\n\n
• 28 million credit card numbers<\/li>\n\n\n\n
• HR employee lists<\/li>\n\n\n\n
• Consumer citizenship information<\/gwmw><\/li>\n<\/ul>\n\n\n\n

  The price for the data is $2M for a one-time sale.<\/p>\n\n\n\n

  The seller also invites Santander to buy this data.
  <\/gwmw><\/p>\n\n\n\n

  Follow me on Twitter: @securityaffairs<\/strong><\/a> and Facebook<\/strong><\/a> and Mastodon<\/a><\/p>\n\n\n\n

  Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n

  (<\/strong>SecurityAffairs<\/strong><\/a>\u00a0\u2013<\/strong>\u00a0hacking,\u00a0ShinyHunters)<\/strong><\/p>\n\n\n\n

  <\/gwmw><\/gwmw><\/p>\n","protected":false},"excerpt":{"rendered":"

  The threat actor ShinyHunters claims breach of Santander and is offering for sale bank data, including information for 30 million customers. A notorious threat actor ShinyHunters is offering a huge trove of data allegedly stolen from the Santander Bank for sale. ShinyHunters claims to have stolen information for 30 million customers, employees, and bank account […]<\/p>\n","protected":false},"author":1,"featured_media":163232,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3323,3,4337,5,55],"tags":[88,182,4112,9508,9506,10918,687,10814,841,1533],"class_list":["post-163956","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","category-cyber-crime","category-data-breach","category-hacking","category-security","tag-cybercrime","tag-data-breach","tag-hacking","tag-hacking-news","tag-information-security-news","tag-it-information-security","tag-pierluigi-paganini","tag-santander","tag-security-affairs","tag-security-news"],"yoast_head":"\n