Sberbank data breach: Russian lender investigates insider threat

guest · Oct 4, 2019

Sberbank data breach: Russian lender investigates insider threat
Employee is primary lead in data leak impacting customers’ credit card details
October 4, 2019
https://portswigger.net/daily-swig/sberbank-data-breach-russian-lender-investigates-insider-threat

Sberbank, Russia’s largest banking and financial services organization, is investigating a suspected data leak impacting at least 200 customers. Unconfirmed reports indicate that this relatively small dataset may just be the tip of the iceberg.

In the first of two brief statements issued yesterday, the Moscow-based banking organization said: “Late on October 2, 2019 Sberbank became aware of a possible leak of credit card data affecting at least 200 Sberbank clients.”
A subsequent report from Russian broadsheet Kommersant suggests that this dataset may just be a sample of a much larger database of breached credentials being offered to potential buyers on the dark web.

According to Kommersant, the seller claims to hold data on more than 60 million Sberbank credit cards.
Reuters is reporting that Sberbank currently has “around 18 million active credit card customers”, meaning that the dataset (if validated) would include millions of inactive card numbers.
Click to expand...

Reuters: Russia's Sberbank investigating potential client data leak

Russia’s biggest lender, Sberbank, is investigating a potential leak of its customers’ personal data, the bank said on Thursday, as the Kommersant newspaper reported that the leak may be the biggest ever in the history of Russian banking.
Click to expand...

guest · Oct 8, 2019

Sberbank employee confesses he is the culprit behind the customer data leakage
October 8, 2019
https://www.ehackingnews.com/2019/10/sberbank-employee-confesses-he-is.html

Recall that on Thursday, Sberbank reported a possible leak of credit card accounts, which affects at least 200 customers of the Bank.

According to a statement on the Bank’s website, "as a result of the internal investigation, the security service of the Bank in cooperation with law enforcement agencies, on October 4, 2019, identified an employee of the Bank born in 1991, the head of the sector in one of the business units of the Bank, who had access to databases and who tried to steal customer information for selfish purposes," the message on the Bank's website reads. The culprit of the leak faces criminal liability.
Click to expand...

guest · Oct 24, 2019

Russia's Sberbank Denies New Data Leak Affected At Least One Million Data Lines
October 24, 2019
https://www.urdupoint.com/en/business/russias-sberbank-denies-new-data-leak-affect-745083.html

Russia's Sberbank refuted in comments to Sputnik on Thursday reports that about one million rows of client data had been leaked in a new incident of an alleged breach.

On Wednesday, Russian newspaper Kommersant reported that the personal data of Sberbank clients had reappeared on the black market, including their passport details, residential address, phone number and credit information. Buyers are also allegedly able to purchase a record of a client's last phone conversation with the call center.
"There was no personal data leak in Sberbank and its subsidiaries," the bank's press-service said, commenting on Kommersant's claims.
Click to expand...

guest · Nov 5, 2019

Sberbank's confessed data thief is transferred from jail to house arrest
November 5, 2019
https://meduza.io/en/news/2019/11/0...hief-is-transferred-from-jail-to-house-arrest

The Volgograd Regional Court has transferred Anton Buturlakin — the “National Collection Service” employee charged with stealing Sberbank clients’ personal data — from a pretrial detention center to house arrest, according to the news agency Interfax.
Sberbank’s data leak was first reported on October 24, the same day that police announced the capture of a suspect in the case.

Buturlakin later signed a confession and expressed remorse for his actions. According to investigators, he sold the stolen database online for 40,000 rubles ($630), and faces up to five years in prison for illegally obtaining and disclosing confidential banking information.
Click to expand...

Log in or Sign up

Sberbank data breach: Russian lender investigates insider threat

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Sberbank data breach: Russian lender investigates insider threat

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches