Hackers try to promote what they are saying is confidential data belonging to thousands and thousands of Santander workers and prospects.
They belong to the identical gang which this week claimed to have hacked Ticketmaster.
The financial institution – which employs 200,000 individuals worldwide, together with round 20,000 within the UK – has confirmed knowledge has been stolen.
Santander has apologised for what it says is “the priority this can understandably trigger” including it’s “proactively contacting affected prospects and staff straight.”
“Following an investigation, now we have now confirmed that sure data referring to prospects of Santander Chile, Spain and Uruguay, in addition to all present and a few former Santander staff of the group had been accessed,” it mentioned in a assertion posted earlier this month.
“No transactional knowledge, nor any credentials that might enable transactions to happen on accounts are contained within the database, together with on-line banking particulars and passwords.”
It mentioned its banking methods had been unaffected so prospects may proceed to “transact securely.”
In a submit on a hacking discussion board – first noticed by researchers at Darkish Net Informer- the group calling themselves ShinyHunters posted an advert saying that they had knowledge together with
- 30 million individuals’s checking account particulars
- 6 million account numbers and balances
- 28 million bank card numbers
- HR data for workers
Santander has not commented on the accuracy of these claims.
ShinyHunters have beforehand offered knowledge confirmed to have been stolen from US telecoms agency AT&T.
The gang can also be promoting what it says is a big quantity of personal knowledge from Ticketmaster.
The Australian authorities says it’s working with Ticketmaster to handle the problem. The FBI has additionally provided to help.
Some consultants have mentioned ShinyHunters’ claims must be handled with warning, as they could be a publicity stunt.
Nonetheless, researchers at cyber-security firm Hudson Rock declare that the Santander breach and the obvious Ticketmaster one are linked to a significant ongoing hack of a big cloud storage firm known as Snowflake.
Hudson Rock says it has spoken to the perpetrators of the alleged Snowflake hack – who declare that they gained entry to its inner system by stealing the login particulars of a member of Snowflake workers.
Snowflake has not confirmed this, however mentioned it was conscious of “doubtlessly unauthorised entry” to a “restricted quantity” of buyer accounts.
If Snowflake is confirmed to be the supply of those ongoing hacks there might be many extra victims.