As SOCRadar, we continuously monitor hacker forums and chatters on the deep web and detect data breaches related to the financial industry such as credit card leaks, employee credentials, customer databases, etc. with SOCRadar’s automated dark web scan feature. We select and display the top data breaches on the deepweb and darknet hacker forums and channels below.
Do you want to know the data breaches about your company exposed on the deep web?
Free Deep Web Report| Date | Target | Leaked Data | Attack Type | Country | Share |
| May 4 | Coinmega.coin.com
| -Bill No
-Bank ID -Check No -Amount -CH Date -Invoice Book -Rcpt No -Bill Type -Branch Code | Not disclosed | Global |
|
| May 4 | A local Financial Service that operates in United States
| -ID
-SSN -DOB -Full Name -Full DL ID -Phone -Full Address | Not disclosed | GUnited States |
|
| May 4 | Verified UK Coinbase Accounts
| -Sensitive data selling
| Not disclosed | United Kingdom |
|
| May 4 | Credit Card Sale
| -CC (only number)
-First name -Last name -Address -Bank name -Total:70,000 | Not disclosed | Global |
|
| May 4 | VTB Bank
| -Hack Notice is Detected
| Not disclosed | Russian Federation |
|
| May 4 | HDFC Bank Ltd. (HDFC Bank)
| -Loan base documents
| Not disclosed | India |
|
| May 4 | Pos Malware Botnet Selling
| -Continuously scanning the memory of 32 and 64bits processes
-Continuously scanning relevant files on all connected drives and caching those for less redundancy -Monitoring network packets from active interfaces -Monitoring clipboard for data transmissions -Keylogger for detecting input. Especially effective against certain POS systems | Software | Global |
|
| May 3 | -Wells Fargo
-Citizens Bank -Hsbc (Hsbc.com.mx) -TD Bank | -Unauthorized Network Access
-Online access -Holder name -Holder address -Date of birth -Full account number | Not disclosed | United States |
|
| May 3 | Btc Italy Customers
| -750,000 Italy Customer [BTC]+Phone
-Password -Name -Surname -Gender -Zip -City | Not disclosed | Italy |
|
| May 3 | Diners Club International
| -Diners club cards sale
| Not disclosed | Global |
|
| May 2 | Credit Card Sale
| -CC
-First name -Last name -DOB -Address -SSN -MMN -City -State -Postal code -County -Phone 62,000 | Not disclosed | United States |
|
| May 2 | Drake software
| -Rdp Access Selling
| Not disclosed | United States |
|
| May 1 | Forex
| -Database Purchasing
| Purchase announcement | Global |
|
| April 30 | Crypto Dumps are on Sale
| -Format :Email-password
-210,000 lines | Not disclosed | Global |
|
| April 29 | First National Bank of Omaha
| -Logs Purchase Request
| Purchase announcement | United States |
|
| April 29 | Fake blockchain.com is on Sale
| -Fully working and fast fake blockchain.com
-Admin panel with statistics -Capture all information (login, password, 12word, session) -Auto-withdrawal of wallets -Bypass all protection during authorization -IP substitution in a letter | Website | Global |
|
| April 29 | Netherlands POS Systems Company
| -Unauthorized Network Access Sale
| Not disclosed | Netherlands |
|
| April 29 | Katapult
| -Data Leak
-Password -Name -2,200,000 | SQL Injection | United States |
|
| April 28 | Forex
| -Data selling
-europeforex.com -iforex.com -protrader.com -etoro.com | Not disclosed | Global |
|
| April 28 | Upstox
| -Database Leak
-100,000 | Not disclosed | India |
|
| April 28 | Alfa Bank
| -Users contacts
-Name -Last Name -Employer -Phone Number -54,543 | Not disclosed | Russian Federation |
|
| April 27 | Forex
| -Users contacts
-Name -Last Name -Country -Phone Number | Not disclosed | Global |
|
| April 27 | SBC Global Alliance
| -Database Leak
-8,000 | Not disclosed | United Kingdom |
|
| April 27 | CITIC Securities Co
| -Database selling
| Not disclosed | China |
|
| April 27 | Investor Platform that operates in Japan
| -Database selling
| Not disclosed | Japan |
|
| April 27 | Pharos Holding
| -Access selling
| Not disclosed | Egypt |
|
| April 25 | VTB Bank
| -First 6 last 4- digits of a bank card
-Name -Surname -Phone number -Region -City | Not disclosed | Russian Federation |
|
| April 23 | Financial Documents of East Asian and Europian Companies
| -Bank accounts
-Companies -The beneficiaries -Passport scans -Bank statements -Transactions | Not disclosed | -Eastern Asia
-Europe |
|
| April 23 | Credit Cards Informations
| -CC
-EXP -CVV -Name -State -Address -7,500 | Not disclosed | United States |
|
| April 22 | Cairn Capital
| -Data Leak
| Ransomware | United Kingdom |
|
| April 21 | NGOs and Charities are Under Threat
| -Attack service sale
| Not disclosed | Global |
|
| April 20 | Credit Card details sale
| -Full names
-CVV -CC number -Expiry dates -Total: 10,000 | Not disclosed | United Arab Emirates |
|
| April 19 | Cashalo
| -Database
-Users: 3,300,000 -Passwords: BCRYPT -Date: January 2021 | Not disclosed | Philippines |
|
| April 19 | Cayman Island Bank
| -Database Leak
| Not disclosed | United Kingdom |
|
| April 18 | Credit Card sale
| -CC
-EXP -CVV -Full Name -Address -City -Country -IP -User Agent -3800 | Not disclosed | United States |
|
| April 18 | Fonds Finanz Maklerservice GmbH
| -Sensitive Data
| Ransomware | Germany |
|
| April 17 | A Finance Sector that operates in China
| -Loan data leak
-Date of Birth -50,000,000 records | Not disclosed | China |
|
| April 17 | A Bank that operates in Iraq
| -Full name
-Date of Birth -Region -The alley -The house -The newspaper -The record -Card number -City -The street | Not disclosed | Iraq |
|
| April 17 | Information of The Payment Aggregator is Registered in Singapore is on Sale
| -Documents for opening companies
-The results of checks on the validity of the data provided -The presence in international criminal databases of both the company and the owner -Proof of address -Bank account of company owners -Passports | Not disclosed | -United States
-Singapore -South-eastern Asia -Europe -Asia |
|
| April 16 | Square Mile Investment Consulting and Research Limited
| -Data Leak
-Customer Data | Not disclosed | Global |
|
| April 16 | Anand Rathi Financial Services Limited
| -Data Leak
-Customer bank account details | Not disclosed | India |
|
| April 15 | National Bank Of Kuwait
| Breaking Service Sale
| Not disclosed | Kuwait |
|
| April 15 | POS Malware [Botnet Panel]
| -Continuously scanning the memory of 32 and 64bits processes
-Continuously scanning relevant files on all connected drives and caching those for less redundancy -Monitoring network packets from active interfaces -Monitoring clipboard for data transmissions -Keylogger for detecting input. Especially effective against certain POS systems | Software | Global |
|
| April 15 | First National Bank Northwest Florida
| -Addresses
-Social security numbers -Personal phone numbers -Date of birth -Contracts -Banking info | Ransomware | United States |
|
| April 15 | Credit Card sale
| -CC Base
-500,000 | Not disclosed | United States |
|
| April 14 | Central Bank Of The Bahamas
| -Database Leak
| Not disclosed | Bahamas |
|
| April 13 | Rapidworkers
| -Mail hash full
-Mail hash left list -Mail pass dehashed -Total:211,240 lines | SQL Injection | India |
|
| April 13 | Bank Log Selling
| -BANK OF AMERİCA
-CHASE BANK -TD BANK -REGIONS BANK -SUNTRUST -CITIZEN BANK -CHIME.COM -PAYPAL.COM -BBT BANK -PNC BANK -CARD.COM -PENFED.COM | Not disclosed | Global |
|
| April 13 | Log Buying Post
| -Sparkasse
-Volksbank -Norsbank -German Bank -Comdirect | Purchase Announcement | Global |
|
| April 13 | Credit Card Sale
| -CC
-EXP -CVV -Name -State -Address -Total 100,000 | Not disclosed | Global |
|
| April 13 | Cryptocurrency Exchange
| -SQL Injection
| SQL Injection Sale | Global |
|
| April 9 | -FKC Local
-First Citizens Bank | -Email Access
-Online Access | Not disclosed | United States |
|
| April 9 | Kingsdale Advisors
| -Database Leak
| Ransomware | United States |
|
| April 9 | GORZYNSKI, UGLOW & FARRELL, P.C.
| -Financial information
-Tax information -Employees information -Payments and banking -Insurance -Customer base -Payments salaries -Commercial rent | Ransomware | United States |
|
| April 7 | Many Accounts & Logs Sale is Detected for Different Companies
| -Online access
Holder name Holder address -Email access Phone number | Not disclosed | Global |
|
| April 7 | CC Fraud Service Sale
| -An example of bank card from our service
-Quality printing -Real embossing -Silver finish identical to original | Fraud | Global |
|
| April 7 | Cash Out Service
| -Roarmoney
-Way2Go -Dave -Robin Hood -Money lion -Walmart MoneyCard -Gobank -Go2bank -Green Dot Card -EDD -American Express card -Little bear card -Roarmoney cards -Simple -Myvanilla card -Chime card | Not disclosed | Global |
|
| April 6 | Account and Credit Card Sale
| -First Name
-Last Name -Address -Country -Mobile Phone -Social Security Number -Date of Birth -Bank Name -Bank Account Number -Bank Account Type | Not disclosed | -United States
-United Kingdom -Asia -Europe |
|
| April 6 | Credit Card Sale
| -CC
-EXP -CVV -Full Name -Address -City -Country -IP -User Agent -Fresh 3000 CC | Not disclosed | United States |
|
| April 6 | Global Tenders
| -Database Leak
-Customer Data -Full Dump -Admin Access -Password -210,000 lines | Not disclosed | Global |
|
| April 5 | Findoc Financial Services Group
| -Database Leak
-Customer Data | Not disclosed | India |
|
| April 5 | A bank that operates in Vietnam
| -Full name
-Address -City -Job -Phone number -Total 5,0000,000 | Not disclosed | Vietnam |
|
| April 5 | Western Union
| -Customer data
-Passport -City -Postal Code -Register Date -Transaction Count -Last Transaction -Countries -Total 50,000 | Bruteforce | United States |
|
| April 4 | PayPal
| -Security bypass exploit
| Exploit sale | United States |
|
| April 2 | Indonesian Banks
| -User data
-Bank Account -Name -Level -53,067 | SQL Injection | Indonesia |
|
| April 2 | The Armadillo Group Ltd
| -Access to Database
| Not disclosed | United Kingdom |
|
| April 2 | Netherlands Banks and Companies
| -Network Access Purchasing
| Purchase announcement | Netherlands |
|
| April 1 | New Recruitment post
| -The threat actor is looking for an experienced spammer
| Recruitment | Global |
|
| April 1 | Different banks that are located in Russia,Poland and Kazakhstan
| -Name
-Surname -Bin -Card type -Expiration Date -Bank name -Phone number -Address | Not disclosed | -Russia
-Poland -Kazakhstan |
|
| April 1 | ANZ Bank Group
| -Brute Force Tool
| Software | Australia and New Zealand |
|
| March 31 | Purchase Request for Credit Cards
| -Cc Buying
| Purchase Announcement | Global |
|
| March 31 | Uphold USA
| -Customer Account
| Not disclosed | United States |
|
| March 30 | VyStar Credit Union
| -Brute Force Software sell
| Software | United States |
|
| March 30 | Unknown Finance Company
| -Name & Surname
-DOB -Current Address -Home Telephone -Mobile -I.D Document -Certificate of membership -Policies - Life Cover, Vehicle cover etc -Proof of income -Confirmation of Bank Account -Members on policies | Not disclosed | Global |
|
| March 30 | Saba Target Investment Fund
| -Full Name
-National ID -Bank card information -Mobile number -Documents scan -Full address -Postal Code 14,000 private data | Not disclosed | Iran |
|
| March 29 | Stock Trader Leads
| -Name
-Phone number -IPO interests -Trading activity | Not disclosed | United States |
|
| March 29 | Forex
Crypto Binary | -Database Purchasing
| Purchase Announcement | Global |
|
| March 28 | Coindirect
| -ID card
-Passwords -Driver license -Invoice Total 300GB | Not disclosed | Global |
|
| March 27 | Chase Bank
Bank of America WellsFargo | -Brute Force Tool sell
| Software | United States |
|
| March 27 | MobiKwik
| -Email
-Passwords -Addresses -Ip address -Gps location 99,000,000 -Month -Year -Card hash 40,000,000 -Mysql dumps Total 350GB -7,5TB Merchant KYC data | Not disclosed | India |
|
| March 26 | Binance
| -API key
| Not disclosed | Global |
|
| March 25 | Tradeguider
| -Database Selling
-Customer Data -Admin accounts | Not disclosed | United Kingdom |
|
| March 24 | Commerzbank
| -Data Leak
-Name -Country -Phone -Email address -105,000 unique lines | Not disclosed | Germany |
|
| March 23 | INDODAX
| -Vulnerability related to 2FA
| Vulnerability | Indonesia |
|
| March 23 | A Finance & Economics Company that operates in France
| -Customer data
-Email/Hash -15,000 lines | Not disclosed | France |
|
| March 23 | National Cooperative Bank Limited (NCBL)
| -Database Leak
| Not disclosed | Nepal |
|
| March 23 | A banking companies that operates in Canada
| -Customer Data
-100,000 lines | Not disclosed | Canada |
|
| March 23 | Summit Credit Union
| -Customers CC
-Social Security Number -Date of Birth -Billing Address -Payment info | Ransomware | United States |
|
| March 23 | Postlethwaite & Netterville
| -Sensitive Data
| Ransomware | United States |
|
| March 23 | American Express
| -Bank backups
-300,000 total lines of personal data | Not disclosed | United States |
|
| March 22 | Chase Bank
| -Brute Force Software sell
| Brute Force | United States |
|
| March 22 | NineRoot Technologies Private Limited
Chqbook.com | -Customers Data
-EMAIL / HASH 456,799 lines | Not disclosed | India |
|
| March 22 | Credit Card Information for Many Countries
| -Credit Cards Sale
-Total 71,936 | Not disclosed | -Brazil
-United States -France -United Arab Emirates -Kuwait -Portugal -India -Egypt -United Kingdom -Oman -Bahrain -Saudi Arabia -Italy -Turkey -Philippines -Pakistan -Iraq -Nigeria -Indonesia -China -Singapore -Thailand -Malaysia |
|
| March 22 | Payoneer Business
PayPal | -Cashout Service
-Non-Chargeable Transfers | Not disclosed | United Kingdom
Netherlands Lithuania Belgium Latvia |
|
| March 22 | Golden 1 Credit Union
| -Account Selling
-Total 303,000 | Not disclosed | United States |
|
| March 21 | Unknown Bank
| -Tax Number
-Social Security Number -24,000 | Not disclosed | Global |
|
| March 21 | Mixed Credit Card Database of Holland
| -Phone
-Street -Postal code -City -Full Name -Ip -Card -10,000 | Not disclosed | Netherlands |
|
| March 19 | Unknown Mexico Bank
| -CC number
-Name -Address -Phone -40,000 unique records | Not disclosed | Mexico |
|
| March 19 | Quickcard
| -Full name
-Phone number -Physical address -Company name -Partial CC info -7,000,000 User | Not disclosed | United States |
|
| March 19 | Centum Investment Company
| -Customer Data
| Not disclosed | Kenya |
|
| March 19 | Fci Bank
| -Email
-First Name -Last Name -User Name -Password -IP Addresses -Phone Numbers -Partner Links -Date of Birth -Website Support Data -464,000 Pakistani customers -Total 3,83 GB | Not disclosed | Pakistan |
|
| March 18 | N26 Business bank
| -Bank drop
| Not disclosed | Global |
|
| March 18 | Unknown Bank on United States
| -Root Access
| Not disclosed | United States |
|
| March 17 | Bank of Maldives
Commercial bank of Maldives Maldives Islamic Bank | -Network Access
| Not disclosed | Maldives |
|
| March 17 | Unknown Stock Market Website
| -Customer data
- 35,000 | Not disclosed | Global |
|
| March 16 | Wells Fargo
| -Network Access
| Remote Desktop Protocol | United States |
|
| March 16 | A bank that operates in United States
| -Network Access
| Not disclosed | United States |
|
| March 15 | MoneyLion
Bank of America | -Verified Accounts
| Not disclosed | United States |
|
| March 15 | Banco del Instituto Ecuatoriano de Seguridad Social(BIESS)
Ecuadorian Institute of Social Security(IESS) | -First name
-Last name -Social Security number -Password -Phone number -Address -Date of birth -Companies -Pledge credits -Mortgage credits -Savings account bank -Clinical profile | Not disclosed | Ecuador |
|
| March 15 | Wincor Nixdorf
| -ATM Malware sale
| Software | Global |
|
| March 14 | UK credit card pieces of information
| -CC
-CVV -Name -Address -Phone number -Post code -450 | Not disclosed | United Kingdom |
|
| March 14 | Sparkasse Online Banking
| -Log selling
-PIN -Iban -Date of birth -Phone number | Not disclosed | Global |
|
| March 14 | Brazil and US credit card information
| -CC
-CVV -Name -Address -City -State -Country -Phone number -3776 | Not disclosed | United States
Brazil |
|
| March 14 | Crypto.com
| -Account Selling
| Not disclosed | United States |
|
| March 13 | Scalable Capital
| -Customer Data
-19,000 | Not disclosed | Germany |
|
| March 13 | Paxful
LocalBitcoins CoinPayments Paxum BITTREX Binance | -Account Selling
| Not disclosed | Global |
|
| March 13 | Forex
| -Forex leads
-Name -Last name -Phone -Broker -Number of trades -Germany: 300,000 -Italy: 250,000 -United Kingdom: 500,000 -Poland: 200,000 -United States: 1,500,000 -Europe: 2,000,000 | Not disclosed | Germany
Italy United Kingdom Poland United States Europe |
|
| March 11 | Ace Cash Express
| -Email
-Passaport -Social Security number -Date of birth -Bank Account -2,820 | Not disclosed | United States |
|
| March 10 | Software Contable Financiero
| -Financial documents
-Accounting reports -Business analyzes -Payment documents | Ransomware | Brazil |
|
| March 10 | American Express
| -Number
-Name -Short Name -Date Of Birth -Tax Number(SSN) -Company Name -Created Modified -City -Zip Code -Email Address -Phone Number -Loan Number -66,900 lines | SQL Injection | United States |
|
| March 10 | Cash-Back company that operates in United States
| -Address
-Bank id -City -Employees -Password -Social security number -Swift code -Unique code -60,000 lines | SQL Injection | United States |
|
| March 9 | Ukrainian National Bank
| -Access to Internet Banking
-10,000€ monthly limit Visa premium card | Not disclosed | Ukraine |
|
| March 9 | Unknown Bank
| -Data Leak
-10,000 users | Not disclosed | United States |
|
| March 8 | Flagstar Bank
| -Customer Data
-Employee Data -Phone numbers -Address -Social Security number | Ransomware | United States |
|
| March 8 | Banco Inmobiliario Mexicano S.A.
| -Sensitive data
| Ransomware | Mexico |
|
| March 6 | Swiss National Bank
| -Database
| SQL Injection | Switzerland |
|
| March 5 | Interactiv Trading
| -Name
-Password -14,000 | Not disclosed | France |
|
| March 3 | Green Dot Corporation
| -A partner capable of processing Green Dot logs
|
Partner search | United States |
|
| March 3 | A bank that operates in Russia
| -Network Access
|
Remote Code Evaluation | Russia |
|
| March 3 | Banco Pichincha
| -Customer Database
-11,000,000 records |
Not disclosed | Ecuador |
|
| March 2 | American Exchange Bank
| -Customer data
-1,000,000 clients |
SQL Injection | United States |
|
| March 2 | First National Bank of Omaha
| -Username
-Password -Account number -Routing number -Holder Name |
Not disclosed | United States |
|
| March 2 | Sparkasse
| -Account Selling
200 pcs. |
Not disclosed | Germany |
|
| March 2 | Ukrainian Privat Bank
| -Database leak
|
Not disclosed | Ukraine |
|
| March 2 | Banks that operates in United States
| -Partnership Searching
-A person with phishing banks US |
Phishing | United States |
|
| March 2 | XTransfer Ltd
| -Customer data
-ID -Member Code -Member name -Phone |
Not disclosed | China |
|
| March 2 | M-Pesa
| -Log leak
-Phone numbers -Full names |
Not disclosed | Kenya |
|
| March 2 | A payment system site that operates in Thailand
| Admin Panel | Not disclosed | Thailand |
|
| March 2 | EximBank
| -Personal data of clients
-Details of agreements -Information about the company's activities 20 GB Sensitive Data |
Ransomware | Indonesia |
|
| March 2 | A Forex company that operates in Germany
| Name
Surname Phone Country and Deposit info 50,000 |
Not disclosed | Germany |
|
| March 2 | Stellar.org
| Customer Data
525,724 unique emails |
Not disclosed | United States |
|
| March 1 | Monese UK
| Accounts
|
Not disclosed | United Kingdom |
|
| March 1 | An unnamed Merchant bank
| Bank Account
Account balance 300,000€ |
Not disclosed | Global |
|
| March 1 | A taxation service provider that operates in Canada
| Network Access
|
Not disclosed | Canada |
|
| February 28 | A bank that operates in Iran
| User Access
44 pc IP scanner IP 185.23... |
Remote Desktop Protocol | Iran |
|
| February 28 | Brazil Ministry of Finance
| Network Access
|
Remote Desktop Protocol | Brazil |
|
| February 28 | Hannis T. Bourgeois LLP
| Sensitive Data
|
Ransomware | United States |
|
| February 27 | Union Bank of Nigeria
| Data leak
Customer data Employee data |
Ransomware | Nigeria |
|
| February 27 | ACE Cash Express
| Database leak
User database Banking info |
Not disclosed | United States |
|
| February 27 | Payment verification service
| Method Selling
|
3d Bypass | Global |
|
| February 27 | Optum Bank
| Customer account
220 account |
Not disclosed | United States |
|
| February 27 | Santander, Metro, Lloyds, Halifax, Nationwide, RBS, HSBC, TSB, and NatWest banks
| Bank Logs
|
Not disclosed | United Kingdom, Spain |
|
| February 25 | Norisbank
| Sensitive data
Customer data Login (email and BD) Docs (ID & Selfie) Photo Tan activation graphic |
Not disclosed | Germany |
|
| February 25 | Bitcoin ATM
| Malware
|
Software | Global |
|
| February 25 | Localbitcoins
| Two Vulnerabilities
|
2FA Bypass
Balance stability |
Finland |
|
| February 25 | Global insurance company offering financial services
| Citrix Access
|
Not disclosed | Global |
|
| February 24 | Ministry of Finance of Ecuador
| Customer data
Identity card and passport 6500 records |
Not disclosed | Ecuador |
|
| February 24 | Automatic Teller Machine
| Selling software for unloading atm
-A list of PM models -A method for bypassing the BIOS |
Software | Global |
|
| February 24 | Forex Italy
| Database
Customer Data 4600 |
Not disclosed | Italy |
|
| February 23 | Several banks operating in Spain
| Unprocessed ATM cards
|
Not disclosed | Spain |
|
| February 23 | Myanmar Financials
| Incorporation documents and ID scans of officers
120,000
Financial and corporate documents Total 330 GB |
Not disclosed | Myanmar |
|
| February 22 | Paypal
| Paypal customer data affecting the United States
35968 rows |
Not disclosed | United States |
|
| February 22 | Financial Debt Recovery Ltd
| Sensitive data
|
Ransomware | Canada |
|
| February 22 | Gershon Biegeleisen & Co. CPA's
| Customers data
Employee data Tax refund and other very important documents |
Ransomware | United States |
|
| February 22 | Agricultural Bank of China
| Customers data
1,619,633 rows |
Not disclosed | China |
|
| February 21 | Commonwealth Bank of Australia
ANZ (Australia and New Zealand Banking Group) Bendigo and Adelaide Bank Limited | Network Access
|
Not disclosed | Australia |
|
| February 20 | Banco Santander
| CC
CVV |
Phishing | Spain |
|
| February 20 | Citibank
Chase Bank | Network Access
|
Remote Desktop Protocol | United States |
|
| February 20 | Agora Direct
| Customer Data
Email 13,200 Total 800,000 |
Not disclosed | Germany |
|
| February 20 | Paymentwall
Jiehuobao Bitdoer | Customer Database
840 MB 6,428,814 lines |
Not disclosed | China |
|
| February 20 | The companies operating in Bosnia and Herzegovina
| Customer Database
|
Not disclosed | Bosnia and Herzegovina |
|
| February 20 | A accounting firm that operates in United States
| Network Access
|
Remote Desktop Protocol | United States |
|
| February 20 | Banco Pichincha
| Customers data
Sensitive Information |
Not disclosed | Ecuador |
|
| February 19 | Undisclosed Giant Private Finance Company
| CAD (Cash Against Documents) base
|
Not disclosed | Global |
|
| February 18 | Kingsdale Advisors
| Sensitive data
Data leak |
Ransomware | United States |
|
| February 18 | HSBC Bank
| Username
Password Ip Location Full access to most accounts 12,000 bank accounts |
Not disclosed | United Kingdom |
|
| February 17 | Rudra Shares & Stok Brokers Ltd
Coimbatore Capital Limited Mansukh Securities and Finance Limited A C Agarwal Share Brokers Pvt. Ltd. Ashlar India | Customer data
Client code Client name Mobile no PAN no Bank name Account no IFSC Code Group ID 109,000 Client |
Not disclosed | India |
|
| February 17 | A fintech platform that delivers digital credit to Filipinos
cashalo.com | User name
Email address Device ID Phone number 3,300,000 User |
SQL Injection | Philippines |
|
| February 15 | Insurance Agents and Brokers that operates in United States
| 261,865 email address
Decision makers names Phone Community Address |
Not disclosed | United States |
|
| February 15 | International foreign exchange market Forex
| Database
Password Bank 85,000 Also 30,000 ID Card and Passport picture |
Not disclosed | Global |
|
| February 15 | Wells Fargo
Chase Bank OnPoint Community Credit Union Alaska USA Federal Credit Union Santander Bank First Citizens Bank | Bruteforce Tool
|
Software | Global |
|
| February 15 | Point of Sale (POS) company that operates in India
| Database
|
SQL Injection | India |
|
| February 14 | Sovcombank - halvacard.ru
| Full name
Date of birth Phone City Halva card 3447 lines |
Not disclosed | Russia |
|
| February 14 | A Micro-Finance company that operates in Nigeria
| Access to the host panel and databases
|
Not disclosed | Nigeria |
|
| February 13 | Banks that operate in Africa
| Access to Top Level Domain for internet banking enabling MiTM attacks
|
Not disclosed | Africa |
|
| February 12 | Federal Tax Service of RUSSIA
| Database
|
SQL Injection | Russia |
|
| February 12 | Universal Accounting Services Inc.
| Data Leak
|
Ransomware | United States |
|
| February 10 | A bank that operates in United States
| Control over 600 Point of Sale(POS) terminal
|
Not disclosed | United States |
|
| February 10 | Alfa Bank
| Customers list
|
Not disclosed | Russian |
|
| February 10 | Russian Sberbank's Kazakhstan branch
| FirstName
LastName MiddleName PhoneMobil 7942 lines |
Not disclosed | Kazakhstan |
|
| February 10 | A bank that operates in England
| Network Access
Private banking bot |
Software | United Kingdom - England |
|
| February 9 | Banco Pichincha, Visa Titanium, Diners Club and Discover
| Customers & employees PII Data
Access to intranet systems Credit Cards |
SQL Injection | Ecuador |
|
| February 9 | Speckle Internet Solutions Private Limited
Paymatrix.com |
Database
Source code |
Not disclosed | India |
|
| February 9 | SETH Ransomware/Crypto Stealer update | Browser Stealer
Loader Ransomware |
Fraud | Global |
|
| February 8 | Many Global Banks | 3D Security Bypass Method
Chrome Addon |
Fraud | Global |
|
| February 8 | PAYPAL | Financial and personal information about customers
|
Not disclosed | United States |
|
| February 8 | A bank that operates in United States | Access to online banking
Access via admin wp sites Access to plugins Backups |
SQL Injection | United States |
|
| February 7 | Siam Commercial Bank | Name
Mobile number Date of birth Passport number Balances |
Not disclosed | Thailand |
|
| February 6 | Credit card sale is detected based in the United States and Canada | 500 Credit Card mix
|
Not disclosed | United States - Canada |
|
| February 4 | Privat Bank | Database
Full name Date of birth Family status Passport ID Car availability Viber presence Education |
Not disclosed | Ukraine |
|
| February 4 | BBVA And Bankia | Sensitive Data
Log Data |
Not disclosed | Spain |
|
| February 2 | B2B and B2C sites that operates in Poland | Sensitive Data
|
SQL Injection | Poland |
|
| February 2 | B2B and B2C sites that operates in Norway | Sensitive Data
|
SQL Injection | Norway |
|
| February 1 | Payment company globally operating in Malaysia | Sensitive Data
380,000 User record |
SQL Injection | Malaysia |
|
| January 31 | Dave Inc. | Email
Password 38,713 lines Database bcrypt:pass file with 185.101 lines |
Not disclosed | Global |
|
| January 31 | A bank that operates in Portugal | Network Access
Database |
Remote Code Evaluatio | Portugal |
|
| January 31 | Financial Education Company | First name
4,900,000 Last name 49,000 1,500,000 Address 1,900,000 Jobs 1,700,000 Income 3,500,000 Total 6,000,000 users |
Not disclosed | India |
|
| January 30 | A bank that operates in Japan and A bank that operates in Australia | Username, Password
Name, Surname Address,City Country, Email TelephoneNumber MothersMaiden CCType, CCNumber CVV2, CCExpires National ID IP 684,200 Employees |
Not disclosed | Japan and Australia |
|
| January 29 | France POS Terminal | RDP access for pos terminal
|
Remote Code Evaluatio | France |
|
| January 28 | A Bank that operates in Argentina and Computer Agency that operates in Tunisia | Network Access
Vulnerability |
Remote Code Evaluatio | Argentina and Tunisia |
|
| January 28 | Brokerage Company | CC name
CC number First name Phone number Billing Address Billing Country 5,000 lines |
Not disclosed | Global |
|
| January 28 | VISTRA | Sensitive Data
|
Ransomware | Global |
|
| January 28 | Amicorp Group | Clients
Employees Confidential data |
Ransomware | China |
|
| January 26 | Cottonwood Financial Inc. | Clients
Employees Financial documents and reports Contract scans and confidential data scans |
Ransomware | United States |
|
| January 26 | A bank that operates in France | Network Access
10,000,000 Customers |
Remote Code Evaluatio | France |
|
| January 26 | A bank operates in Pakistan | E-mail Access
|
Not disclosed | Pakistan |
|
| January 25 | Actuaries and Associates | Sensitive Data
Social Security number More than 2000 |
Ransomware | United States |
|
| January 25 | Kneip Communications S.A | Regulatory reporting
Advisory services |
Ransomware | United Kingdom |
|
| January 23 | Bancomer Mexico | Database
|
Not disclosed | Mexico |
|
| January 23 | Central Bank of Bahrain | Database
|
Not disclosed | Bahrain |
|
| January 23 | Banco Santander | Database
|
Not disclosed | Mexico |
|
| January 21 | A couple of Banks that operates in Italy | Network Access
|
SQL Injection | Italy |
|
| January 20 | Bahrain Central Bank | CBB backup file
Database 13 GB |
Not disclosed | Bahrain |
|
| January 19 | Buddy | Sensitive data | SQL Injection | United States |
|
| January 15 | Barbizon Capital | Secret data | Ransomware | Global |
|
| January 14 | Andrews Federal Credit Union , Onpoint Community Credit Union , Santander Bank , Discover Bank ,First Citiens Bank , Bank of America , Barclays , BBVA USA , Us Bank , Us Hsbc , Chase , Royal Bank , Us Bank Elia Card , Capital One , Union Bank , Wells Fargo , Rbc Bank , First National Bank of Omaha , First Bank Card , First Us Bank , Huntington Bank , Tb Bank , Citi Bank , Alaska Usa , Cibc U.s , Pnc Banking , USAA , American Express , Macatawa Bank , Axos Bank , First United Bank , Wausa Bank , Fulton Bank , Unity Bank , Trustco Bank , Dacotah Bank , Tiaa Bank | Bruteforce panel
Multithreading Support for all separators. Support for all types of proxies. Regular updates. |
Bruteforce and Checker tool | Global |
|
| January 14 | Bank of Shanghai | Name
Phone Address ID number 803.000 customers |
SQL Injection | China |
|
| January 14 | Cre Credit Services | Secret data | Ransomware | United States |
|
| January 13 | A Bank | Different Balance Sheet
User Information Customer Data |
SQL Injection | Spain |
|
| January 13 | Malaysia Forex | Database
20,518 rows |
SQL Injection | Malaysia |
|
| January 12 | Leede Jones Gable | Sensitive Data | Ransomware | Canada |
|
| January 12 | Cmc Consulting | important information of the company
Financial documents Contracts Bank documents |
Ransomware | United Kingdom |
|
| January 11 | Total System Services | Sensitive Data | Ransomware | Georgia |
|
| January 11 | Rosenblatt | Sensitive Data | Ransomware | United Kingdom |
|
| January 10 | Commonwealth Bank | Different Balances
User Information Customer Data |
SQL Injection | Australia |
|
| January 9 | Bank Alfalah | Contain
User Information Employer Work phone and Mobile phone Email and Fax Address |
SQL Injection | Pakistan |
|
| January 9 | Bank of Communications |
Contain
Database 16,791,320 Database |
SQL Injection | China |
|
| January 8 | Indiabulls Housing Finance |
Bank files
Finance documents Employee details |
Ransomware | India |
|
| January 7 | Finalyse |
Company Data
Customers Employees |
Ransomware | Belgium |
|
| January 7 | DJB Chartered Professional Accountants |
Sensitive Data
Data leak |
Ransomware | Canada |
|
| January 6 | Brain Paul | Sensitive Data | Ransomware | United Kingdom |
|
| January 6 | Lonrho |
Important files
Documents Customer data Employee data |
Ransomware | United Kingdom |
|
| January 6 | Sky Leasing |
Customer data
Employee data Drawings Other very important documents More than 100 GB |
Ransomware | United States |
|
| January 6 | American Bank Systems INC. |
Declarations
Statements Contact Access the online Bank Electronic negotiations |
Ransomware | Abd |
|
| January 5 | Forex | Database
34,000 records |
Not disclosed | Global |
|
| January 5 | Police Security S.a.c. | Sensitive Data | Ransomware | Peru |
|
| January 5 | Multiple |
Name
Loan amount Gender Birthplace ID card details 80.000 customers |
Not disclosed | China |
|
| January 4 | Capital Economics | Email
Name Phone Address Job title Contact status |
Not disclosed | USA, UK |
|
| January 4 | St James Parish Credit Union | Sensitive Data | Ransomware | United States |
|
| January 4 | A company that operates in Nigeria | Network Access | Not disclosed | Nigeria |
|
| January 1 | BANKIR.RU |
Customer Data
User Information |
SQL Injection | Russian Federation |
|
| January 1 | IDFC FIRST Bank |
Personal data of clients
581 people totally |
Ransomware | India |
|
| January 1 | Goodmanmintz |
Client accounting data
Audit results Bank account passwords Counterparty databases 100 GB |
Ransomware | Canada |
|
| Date | Target | Leaked Data | Attack Type | Country | Share |
| 31 December 2020 | VTB Bank | Name Surname E-mail Phone number Address 84,000 | SQL Injection | Russian Federation |
|
| 31 December 2020 | MTS Bank | Last Name First Name Phone number Another bases 7500 lines | SQL Injection | Russian Federation |
|
| 31 December 2020 | Accordia | User id User name User level User e-mail 1,254,425 | Not disclosed | United States |
|
| 29 December 2020 | A bank that operates in Spain | IT services User rights In Network 2pk | RDP | Spain |
|
| 29 December 2020 | Global banks | Credit card skimmer Encoder device | Fraud | Global |
|
| 28 December 2020 | Thailand and Malaysia Bank | Data of their customers Account numbers Balances Phones and other info | SQL Injection | Thailand, Malaysia |
|
| 28 December 2020 | USA Bank | Administrator access to Bank website WordPress located. | SQL Injection | ABD |
|
| 27 December 2020 | National Bank of Serbia | Network Access | Remote Code Evaluation | Serbia |
|
| 27 December 2020 | Forex & Cryptocurrency Company | Forexcrypto base 35,000 | Not disclosed | Global |
|
| 26 December 2020 | Two bank that operate in France and Poland | Network Access | SQL Injection | Poland, France |
|
| 25 December 2020 | Amscot Financial | Customer Data | Ransomware | United States |
|
| 24 December 2020 | Bank of Chile | Employees Entrance to online banking on the site Customer information | SQL Injection | Chile |
|
| 24 December 2020 | Bank of Chile | User data access | SQL Injection | Chile |
|
| 23 December 2020 | Global | Credit card auto-delivery store | Fraud | Global |
|
| 23 December 2020 | Global | Full name E-mail address Bank account type Bank account number Routing number Sensitive data | Not disclosed | Global |
|
| 21 December 2020 | Many financial companies | The data are lists of customers and investors | Not disclosed | Global |
|
| 20 December 2020 | Navy Federal Credit Union | Account login E-mail access Credit report | Fraud | ABD |
|
| 19 December 2020 | Banco Del Bienestar | ID Address User content | Phishing Attack | Mexico |
|
| 19 December 2020 | Mitsubishi UFJ Financial Group | Account number Name Passport number Phone number and balance 100,000 | SQL Injection | Japan |
|
| 18 December 2020 | Financial institution that operates in the USA | First and last name Address, Number E-mail IP Address Employer, Job title Bank account 10,000 | Not disclosed | ABD |
|
| 18 December 2020 | A company that operates in India | SQL Injection vulnerability sale | Fraud | India |
|
| 18 December 2020 | Finance Company that operates in Germany | Local admin user/pass | RDP | Germany |
|
| 17 December 2020 | Bank of America Wells Fargo BMO Canada Desjardins Bank Canada | Bank logins E-mail access Full CC | SQL Injection | United Kingdom, United States, Canada |
|
| 17 December 2020 | A loan firm operating in the USA | First name Last name E-mail Phone Address Employer 18770 records | Not disclosed | United States |
|
| 16 December 2020 | Middle East Commodity Brokerage Company | Iran bourse Registration Form | Not disclosed | Iran Islamic Republic of |
|
| 16 December 2020 | Wells Fargo | Paypal access e-bay access Amazon access File sharing access Account 600,000 | RDP | United States |
|
| 16 December 2020 | Global | Websites 31,500 | Cardable Site Finder | Global |
|
| 15 December 2020 | International banking institutions operating in Europe and the USA | Bank logs Paypal | RAT | EU, ABD |
|
| 13 December 2020 | 700 companies that operate Globally | Switch access routers ssh console control Complete information on hosts GEO Asia fortune clients | Not disclosed | Global |
|
| 12 December 2020 | Noble Bank | Last name First name E-mail address Branch Number Customer Number Customer County 15,000 | SQL Injection | Poland |
|
| 12 December 2020 | Payment platform operating in Argentina | Network Access | Webshell | Argentina |
|
| 12 December 2020 | Indian Trading company | Network Access | Webshell | India |
|
| 11 December 2020 | Sber Bank | Database 7000 | SQL Injection | Kazakhstan |
|
| 11 December 2020 | Wells Fargo, Sun Trust, Bank of America, Desjardins, Nationwide, National Westminster Bank, RCB Bank | Fullz+CC E-mail access Customer Data | Not disclosed | United States, United Kingdom, Canada |
|
| 9 December 2020 | Germany Trading company | E-mail Name Surname Address Clean text password 144,000 Members Data | Not disclosed | Germany |
|
| 9 December 2020 | Global | Zero Day vulnerability sale | Phishing Attack | Global |
|
| 4 December 2020 | Kneip Communication S.a | Sensitive data | Ransomware | United Kingdom |
|
| 16 November 2020 | Compal Electronics | Sensitive data Data leak | Ransomware | Taiwan, Province of China |
|
| 6 September 2020 | A bank that operates in Chile | Customer data User information Network access | Webshell | Chile |
|
| 20 August 2020 | A bank that operates in Chile | ATM Access | Fraud | Chile |
|
| 8 August 2020 | Brookfield | Finance Human resources Payroll Business plan 200 GB | Ransomware | United States |
|
| 19 January 2020 | A bank that operates in Chile | Looking for an expert in google adwords | Fraud | Chile |
|
| 6 January 2020 | Liberty Linehaul | Sensitive Data | Ransomware | United Kingdom |
|
