US commercial bank Truist Bank has confirmed that its systems were compromised during a cyberattack in October 2023, which apparently led to a data breach. The confirmation comes after some of data the company's
Truist Bank was created after the merger of SunTrust Banks and BB&T (Branch Banking and Trust Company) in December 2019. Now, it is a leading commercial bank offering a wide range of services.
However, an attacker known as Sp1d3ris claiming to be selling stolen bank data, which contains information belonging to 65,000 employees. The selling price is $1 million.
See also: Life360 reports extortion attempt after Tile data breach
At present, the hacker (by independent researchers) but the data reportedly also contains bank transactions with names, account numbers, balances and IVR funds transfer source code.
“In October 2023, we experienced a cybersecurity incident that was quickly contained,” a Truist Bank spokesperson told BleepingComputer. “Working with external security consultants, we conducted a thorough investigation, took additional measures to secure our systems, and notified a small number of customers last fall.”
The spokesperson reportedly said that this Truist Bank data breach is not connected to the recent Snowflake.
“We regularly work with law enforcement and external cybersecurity experts to help protect our systems and data,” the Truist bank spokesperson added.
See also: 23andMe: Canadian and UK authorities investigate data breach
The bank also said it has notified affected customers.
It is worth noting that the same attacker recently leaked data from cybersecurity company Cylance. Cylance confirmed the legitimacy of his claims, stating that this is old data (from 2015-2018) stolen from a “third-party platform.”
This incident highlights the importance of cybersecurity for businesses, especially those that handle sensitive customer information. Companies, and banks in particular, need to invest in strong security measures and regularly update their systems to protect themselves from potential cyber threats. In addition, employees need to be trained in cybersecurity best practices to prevent attacks such as phishing scams.
See also: Christie's: Auction house notifies customers of data breach
Furthermore, incidents like this serve as a reminder that no company is immune to cyberattacks. Even large and established companies like Truist Bank can fall victim to these malicious acts.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
With the ever-evolving cyber threat landscape, it is essential for banks to remain vigilant and continually evaluate and measures security to protect both sensitive information and their overall operations.
Source: www.bleepingcomputer.com
