Hackers Breach 400,000 UniCredit Bank Accounts for Data

ronjor · Jul 26, 2017

By Sonia Sirletti and Edward Robinson

July 26, 2017, 3:15 AM EDT July 26, 2017, 1:22 PM EDT
UniCredit SpA, Italy’s No. 1 bank, said hackers took biographical and loan data from 400,000 client accounts in one of the biggest breaches of European banking security this year.
Click to expand...

guest · Oct 28, 2019

UniCredit Breach Affects Three Million Records
October 28, 2019
https://www.infosecurity-magazine.com/news/unicredit-breach-affects-three/

Italian bank UniCredit has identified a breach of its IT systems affecting millions of customer records, according to breaking reports.

The lender confirmed on Monday that a file created in 2015 containing three million records relating to Italian clients had been involved in the incident.
That’s in contrast to a major 2016 breach disclosed two years’ ago in which 400,000 were accessed by attackers in September and October. They were only discovered around nine months later.

Since that time, Italy’s largest bank by assets claimed that it has “invested an additional €2.4bn in upgrading and strengthening its IT systems and cybersecurity,” according to the report.
Click to expand...

guest · Apr 22, 2020

UniCredit Hackers Try to Sell Employee Data on Cyber-Crime Forums
April 21, 2020
https://www.insurancejournal.com/news/international/2020/04/21/565611.htm

Data on about 3,000 UniCredit SpA employees was put up for sale on cyber-crime forums after a hacking attack.

The data went on sale on April 19 and contained what the hacker said was information on UniCredit workers, including emails, phone numbers, encrypted passwords and names, Telsy, a unit of Telecom Italia SpA, wrote on its website Monday.

“The database appears to be genuine and the potential result of a SQL injection attack,” Telsy wrote. A SQL injection is a malicious code-insertion technique used to attack applications.
Leaked data is sold on the basis of a plan relating to the number of “rows” offered to the buyer. The cost of the full package including 150,000 rows of data is $10,000, and it contains UniCredit data “from late 2018-2019,” according to Telsy’s posting. It costs $1,000 to gain access to the 3,000 employees names.
Click to expand...

Like many large companies and institutions, banks have faced several cyber-attacks that have disrupted operations or compromised clients’ private information. Last year, UniCredit discovered a breach involving data including names, phone numbers and emails of 3 million customers.
Click to expand...

guest · Jul 2, 2020

Italian Garante Fines Bank 600,000 Euros for Pre-GDPR Data Breach
July 1, 2020
https://www.huntonprivacyblog.com/2...s-bank-600000-euros-for-pre-gdpr-data-breach/

The Italian Data Protection Authority (Garante per la protezione dei dati personali, “Garante”) recently announced that it levied a €600,000 fine on banking institution UniCredit for several violations of the Italian Personal Data Protection Code, in its pre-General Data Protection Regulation (“GDPR”) form.
The sanction was imposed following a data breach that took place between April 2016 and July 2017 that the banking institution notified to the Garante at the end of July 2017.

The Garante found that the bank had failed to implement adequate security measures and comply with local requirements regarding the tracking of banking transactions
Read the Garante’s decision (in Italian).
Click to expand...

Log in or Sign up

Hackers Breach 400,000 UniCredit Bank Accounts for Data

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Log in or Sign up

Hackers Breach 400,000 UniCredit Bank Accounts for Data

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Useful Searches