Threat Actor: Unknown | Unknown
Victim: Truist Bank | Truist Bank
Price: $1,000,000
Exfiltrated Data Type: Employee records, bank transactions, IVR source code
Additional Information:
- The threat actor claims to have stolen data from Truist Bank and links it to a wider Snowflake breach.
- The compromised data includes sensitive information about employees and bank transactions.
- The exfiltrated data also includes the source code for Truist Bank’s IVR funds transfer system.
- The price set for this data is $1,000,000.
- Potential risks include identity theft, financial fraud, and security vulnerabilities.
- This incident highlights the need for robust cybersecurity measures in financial institutions.
A threat actor has announced that they are selling a significant amount of data allegedly stolen from Truist Bank, linking the breach to a wider Snowflake breach. The compromised data includes sensitive information about both employees and bank transactions, alongside source code for the bank’s IVR funds transfer system.
Details of the Alleged Breach:
- Price: $1,000,000
- Data Included:
- Employee Records: 65,000 records containing detailed personal and professional information.
- Bank Transactions: Data including customer names, account numbers, and balances.
- IVR Source Code: Source code for the bank’s Interactive Voice Response (IVR) funds transfer system.
This breach, if confirmed, could have far-reaching implications for Truist Bank, its employees, and its customers. The inclusion of employee records and bank transaction details poses serious risks of identity theft and financial fraud. Additionally, the exposure of the IVR funds transfer source code could potentially lead to further security vulnerabilities.
The threat actor has set the price for this data at $1,000,000, emphasizing the perceived value and sensitivity of the information. This announcement highlights the increasing sophistication of cyberattacks and the critical importance of robust cybersecurity measures for financial institutions.
Original Source: https://dailydarkweb.net/threat-actor-claims-to-sell-truist-bank-data-connected-to-snowflake-breach/