Santander Bank customer data leaked. What about Poland?

USD 2 million for the data of 30 million customers

The ShinyHunters collective has listed the stolen Santander data on a hacking forum with a starting price 2 million dollars. The stolen data includes details about bank accounts of approximately 30 million bank customers, balances of 6 million accounts, 28 million credit card numbers and personal data of bank employees.

Santander is also welcome to purchase this data

– wrote the hackers in the advertisement he quotes The Guardian.

The hackers waited two weeks to make the announcement

An offer to sell Santander's customer data has appeared two weeks after a Spanish bank informed customers that a third-party supplier's database had been compromised. On May 14, the bank confirmed that customer data had been compromised in Chile, Spain and Uruguayas well as information about current and some former Santander employees.

In response to questions The Guardian, Santander assured that customer data from other markets is safe:

Customer data in all other markets and other Santander units is not at risk. The database does not contain any transaction data or any credentials that would enable account transactions, including online banking details and passwords.

These are the same hackers who stole the data of 560 million Ticketmaster customers (Live Nation)

ShinyHunters, a hacking group founded in 2020, took responsibility for the latest the Ticketmaster security breach that reportedly affected 560 million customer accounts. Hackers put 1.3 TB of data from this leak on the dark web with a starting price of $500,000.

There are also claims that this group attacked Microsoft and AT&T in the spring. In a March statement, AT&T confirmed that the data of 70 million people had been breached, including former and current customers of the telecommunications giant.

Snowflake on the fork

Cybersecurity researchers at Hudson Rock say the alleged Santander data breach and Ticketmaster incident are linked to the ongoing attack on cloud storage company Snowlake. As reported by the BBC, hackers claim that they gained unauthorized access to Snowflake's internal systems by breaking an employee's login details.

On June 3, the Snowflake press office sent the following statement to the Telepolis.pl editorial office:

There has been significant progress in our cybersecurity investigation. Cybersecurity experts from CrowdStrike and Mandiant agree with our initial findings that there was no breach of our platform.

We have not identified evidence to suggest that this activity was caused by a vulnerability, misconfiguration, or compromise of the Snowflake platform.