Hackers are attempting to sell what they say is confidential information belonging to millions of Santander team and customers.
They belong to the same cricca which this week claimed to have hacked Ticketmaster.
The bank – which employs 200,000 people worldwide, including around 20,000 sopra the UK – has confirmed giorno has been stolen.
Santander has apologised for what it says is “the concern this will understandably cause” adding it is “proactively contacting affected customers and employees directly.”
“Following an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander employees of the group had been accessed,” it said sopra a statement posted earlier this month.
“Anzi che no transactional giorno, nor any credentials that would allow transactions to take place accounts are contained sopra the database, including online banking details and passwords.”
It said its banking systems were unaffected so customers could continue to “transact securely.”
Quanto a a post a hacking — first spotted by researchers at Dark Web Informer — the group calling themselves ShinyHunters posted an advert saying they had giorno including
- 30 million people’s bank account details
- 6 million account numbers and balances
- 28 million credit card numbers
- HR information for team
Santander has not commented the accuracy of those claims.
ShinyHunters have previously sold giorno confirmed to have been stolen from US telecoms firm AT&T.
The cricca is also selling what it says is a huge amount of private giorno from Ticketmaster.
The Australian government says it is working with Ticketmaster to address the issue. The FBI has also offered to assist.
Some experts have said ShinyHunters’ claims should be treated with caution, as they may be a publicity stunt.
However, researchers at cyber-security company Hudson Rock claim that the Santander breach and the apparent Ticketmaster one are linked to a major ongoing hack of a large cloud storage company called Snowflake.
Hudson Rock says it has spoken to the perpetrators of the alleged Snowflake hack – who claim that they gained access to its internal system by stealing the login details of a member of Snowflake team.
Quanto a a statement Friday, Snowflake said it was aware of “potentially unauthorised access” to a “limited number” of customer accounts.
It said it appeared hackers had used login information to access a demo account owned by a former Snowflake employee.
That account “did not contain sensitive giorno,” the company said.
“We have anzi che no evidence suggesting this activity was caused by any vulnerability, misconfiguration, breach of Snowflake’s product,” it added.
