The infamous ShinyHunters hacker group has claimed responsibility for a major cyber attack on Santander bank that compromised the personal information of all bank employees and customers in Chile, Spain and Uruguay.
Banco Santander S.A., doing business as Santander Group, disclosed a data security incident last month where an unauthorized party gained access to a Santander database hosted by a third-party provider.
“Following an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander employees of the group had been accessed,” it said.
The bank added that the compromised database did not contain any transactional data, or any credentials that would allow unauthorised transactions to take place on accounts. This includes online banking details and account passwords.
While the bank did not share any details on the nature of the compromised data or the identity of the attackers, a group of threat actors going by the name ShinyHunters has now claimed responsibility for the cyber attack on Santander and listed it as a victim on its data leak site.
According to a post by Dark Web Informer, the group claims that the stolen data contains “30 million customers, 6 million account numbers and balances, 28 million credit card numbers, HR employee lists, and more.”
ShinyHunters has quoted a price of $2,000,000 for the entire database and is willing to sell it to a single buyer. To prove the authenticity of its claims, the hacker group has shared samples of the data allegedly stolen from the bank’s database.
Santander is yet to disclose the number of affected individuals but it has assured to contact those impacted by the data security incident.
