Santander has confirmed a significant cyber attack that resulted in data theft related to all its staff and millions of overseas customers.
The breach, attributed to the hacking group ShinyHunters, affected information on current and some former employees and customers in Spain, Chile, and Uruguay.
The bank clarified no transactional data or credentials necessary for account transactions, including online banking details and passwords, were compromised.
Santander, which employs about 200,000 people globally, including 20,000 in the UK, stressed customer data in the UK and other markets were unaffected.
Santander said: “We apologize for the concern this will understandably cause and are proactively contacting affected customers and employees directly.
The bank emphasized its banking systems remain secure and that customers can continue to transact safely.
Reports indicate that ShinyHunters, which also claimed responsibility for a recent Ticketmaster data breach, allegedly sells access to Santander’s database to a single buyer for $2 million (£1.6 million).
The hacking group also offered Santander the opportunity to purchase the stolen data.
Dark Web Informer, a group that monitors and exposes cyber threats, reported ShinyHunters’ claim.
Santander has not commented on the accuracy of these claims.
Need Career Advice? Get employment skills advice at all levels of your career
This incident follows news of Ticketmaster’s cyber attack.
ShinyHunters allegedly demanded around £400,000 in ransom to prevent the sale of stolen data on the dark web.
Ticketmaster has not publicly confirmed this breach.
Santander’s proactive communication aims to mitigate concerns and reassure customers and employees of the security of their banking transactions.
However, the breach underscores the growing threat of cyber attacks and the importance of robust cybersecurity measures.
