22 votes

All Santander staff and 'thirty million' customers in Spain, Chile and Uruguay hacked

3 comments

  1. [2]
    skybrian
    (edited )
    Link
    From the article: … In the US, you could probably write a check using an account number, but I guess they don’t have that problem? … Snowflake denies this, claiming that there’s no evidence of a...

    From the article:

    Hackers are attempting to sell what they say is confidential information belonging to millions of Santander staff and customers.

    They belong to the same gang which this week claimed to have hacked Ticketmaster.
    The bank - which employs 200,000 people worldwide, including around 20,000 in the UK - has confirmed data has been stolen.

    A statement from the bank said that:

    "No transactional data, nor any credentials that would allow transactions to take place on accounts are contained in the database, including online banking details and passwords."
    It said its banking systems were unaffected so customers could continue to "transact securely."

    In a post on a hacking forum - first spotted by researchers at Dark Web Informer- the group calling themselves ShinyHunters posted an advert saying they had data including

    • 30 million people’s bank account details
    • 6 million account numbers and balances
    • 28 million credit card numbers
    • HR information for staff

    In the US, you could probably write a check using an account number, but I guess they don’t have that problem?

    Some experts have said ShinyHunters' claims should be treated with caution, as they may be a publicity stunt.

    However, researchers at cyber-security company Hudson Rock claim that the Santander breach and the apparent Ticketmaster one are linked to a major ongoing hack of a large cloud storage company called Snowflake.

    Hudson Rock says it has spoken to the perpetrators of the alleged Snowflake hack - who claim that they gained access to its internal system by stealing the login details of a member of Snowflake staff.

    Snowflake denies this, claiming that there’s no evidence of a hack on their end. They think the hackers must have gotten in via stealing customer credentials.

    4 votes
    1. unkz
      Link Parent
      In Chile at least, their bank account numbers are kind of weird. Basically, they are the equivalent of an SSN, called an RUT, and you just use it as your bank account number at every bank. Also...

      In the US, you could probably write a check using an account number, but I guess they don’t have that problem?

      In Chile at least, their bank account numbers are kind of weird. Basically, they are the equivalent of an SSN, called an RUT, and you just use it as your bank account number at every bank.

      Also their authentication systems are archaic. Like, 90s bad.

      6 votes