In a post on a hacking forum – first spotted by researchers at Dark Web Informer- the group calling themselves ShinyHunters posted an advert saying they had data including
30 million people’s bank account details
6 million account numbers and balances
28 million credit card numbers
HR information for staff
Santander has not commented on the accuracy of those claims.
ShinyHunters have previously sold data confirmed to have been stolen from US telecoms firm AT&T.
The gang is also selling what it says is a huge amount of private data from Ticketmaster.
The Australian government says it is working with Ticketmaster to address the issue. The FBI has also offered to assist.
Some experts have said ShinyHunters’ claims should be treated with caution, as they may be a publicity stunt.
However, researchers at cyber-security company Hudson Rock claim that the Santander breach and the apparent Ticketmaster one are linked to a major ongoing hack of a large cloud storage company called Snowflake.
Hudson Rock says it has spoken to the perpetrators of the alleged Snowflake hack – who claim that they gained access to its internal system by stealing the login details of a member of Snowflake staff.
Snowflake has not confirmed this but notified customers on Friday that it was “investigating an increase in cyber threat activity targeting some of our customers’ accounts.”
If Snowflake is proven to be the source of these ongoing hacks there could be many more victims.
Credit: Source link
