ShinyHunters Claims Santander Bank Breach: 30M Customers’ Data for Sale

ShinyHunters’ claims surfaced two weeks after Santander Bank acknowledged a data breach linked to a third-party contractor involving data of customers in Spain, Chile, and Uruguay.

The notorious hacking group ShinyHunters is claiming responsibility for a breach at Santander Bank, a global financial giant. As a result, the personal data of over 30 million customers has been stolen and is currently being sold for a one-time sale price of $2 million.

Santander Bank, a prominent player in the global financial market, operates a network of 8,518 branches worldwide. The alleged breach impacts customers in Spain, Chile, and Uruguay.

Notably, ShinyHunters’ claims surfaced two weeks after Santander Bank acknowledged a data breach linked to a third-party contractor. In a statement (PDF), the bank confirmed that the breach predominantly affected customers in Chile, Spain, and Uruguay, along with several former employees.

ShinyHunters is the same hacker group that claimed responsibility for the recent Ticketmaster-Livenation data breach, where the group allegedly stole 560 million user records, including partial payment card details, just a few days ago.

As seen by hackread.com, the data trove being offered for sale by ShinyHunters contains a wealth of sensitive information, including:

• 30 million customer records
• 6 million account numbers and balances
• HR employee lists
• Consumer citizenship information
• 28 million full credit card numbers, complete with verification details (AVS), and expiration dates (CVV not included)
• And various other sensitive data points

ShinyHunters on Breach Forums

****ShinyHunters’ Sophistication and Recent Activities****

ShinyHunters is no stranger to the hacking and cybercrime world. The group is known for its high-profile data breaches and is also the owner and administrator of Breach Forums, a notorious platform for cybercrime activities.

Despite the FBI’s recent efforts to shut down the forum, ShinyHunters managed to reclaim the seized domain, showcasing their technical prowess and resilience against law enforcement actions. This, as reported by Hackread.com, not only resulted in the return of Breach Forums to the dark web but also saw its revival on the clearnet, using the original domain.

****Advice for Santander Bank Customers****

The availability of such a vast amount of sensitive financial information raises serious concerns about the potential for identity theft, fraud, and other illicit activities. This breach highlights the ongoing threats posed by hackers to financial institutions and their customers.

Since Santander Bank has already addressed the issue regarding the breach, customers are urged to monitor their accounts closely for any suspicious activity. Additionally, it is recommended to implement security measures such as two-factor authentication and regularly updating passwords to mitigate the risk of further exploitation by cybercriminals.

1. IntelBroker Hacker Leaks Alleged HSBC & Barclays Bank Data
2. Hacker Leaks 73M Records from Indian HDFC Bank Subsidiary
3. Infosys Data Breach Impacts 57,000 Bank of America Customers
4. World’s Largest Bank ICBC Discloses Crippling Ransomware Attack
5. BBTok Malware Returns, Targeting Over 40 Banks in Brazil and Mexico