ShinyHunters hackers claim to be behind the recent breach Santander Bank data and now say they are selling various data , including information on 30 million customers, employees and bank account details.
The ShinyHunters group is known for selling and leaking data from companies. One of its most recent attacks appears to be a massive Ticketmaster data breach , which was announced last week and affected 560 million people.
The hackers also appear to be linked to the ownership of BreachForums, which deals with the sale and leaking of stolen data.
See also: Data breach affects Toshiba America
Two weeks ago, Spain's largest bank, Santander, revealed a data breach, following unauthorized access to a database hosted by a third-party provider.
The investigation showed that the attackers had access to data about employees (former and current) and customers of the bank in Chile, Spain and Uruguay.
“Customer data across all other Santander markets and businesses is not affected,” the bank explained.
As spotted by Dark Web Informer, hackers ShinyHunters are now claiming to be selling data for Santander customers (Chile, Spain, and Uruguay) for $2 million.
ShinyHunters claims that the stolen data contains the personal information of 30 million customers and employees, 28 million credit card numbers, and 6 million account numbers and balances.
In fact, samples of the data with some of the above information were leaked, but it cannot be confirmed that it belongs to Santander.
See also: Everbridge: The company announced a data breach
The alleged sale of the data comes shortly after the FBI seized BreachForums on May 15, which was operated by ShinyHunters and another threat actor known as Baphomet.
While ShinyHunters says Baphomet was captured, it quickly restored the BreachForums website from a backup on a new domain.
Since then, data sales have been announced for Ticketmaster and Santander.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
However, what makes these sales unusual is that both were first listed on the Russian-language hacking forum Exploit, just days before they were listed on the new BreachForums.
These sales were posted to new member accounts, without reference to BreachForums or ShinyHunters, leading others to believe that the sale on BreachForums was fake.
However, ShinyHunters has acted several times as a data breach broker for other threat actors, and it is not uncommon for these threat actors to create new aliases on various forums to sell stolen data.
While TicketMaster has not confirmed whether breach , ShinyHunters has a reputation for selling legitimate data breaches in the past. For example, ShinyHunters has breached or leaked data from companies including Wattpad, Tokopedia, GitHub, BigBasket, Nitro PDF, Pixlr, TeeSpring, Promo.com, Mathway, and many others.
Returning to the Santander Bank data breach, such an incident could have serious implications for both the bank and its millions of customers . The bank could face hefty fines and legal consequences for its failure to protect the data of its customers and employees, while affected individuals could face various frauds, such as identity theft.
See also: BBC: Data breach affects former and current employees
This incident also highlights the importance for organizations to have the right cybersecurity measures in place to prevent such attacks. It is important for businesses to regularly evaluate and update their security protocols to stay protected from ever-evolving threats.
The ShinyHunters hackers’ claim to have accessed sensitive Santander Bank data is a reminder of the ongoing threat businesses in today’s digital landscape. This incident also serves as a wake-up call for organizations to prioritize cybersecurity and take proactive measures to protect their systems and data from malicious actors.
Source: www.bleepingcomputer.com
