PRESS: Second personal data leak since Sep reported from Sberbank

MOSCOW, Oct 24 (PRIME) -- A seller on an illegal Internet resource claims to possess private data of the clients of Russia’s biggest lender Sberbank, which might be a second data leak from the bank since September, business daily Kommersant reported on Thursday, citing the seller.

A spokesperson for Sberbank denied the leak, “No such client data leaks have taken place in Sberbank and its affiliates.”

The seller said that the database allegedly has about a million entries with passport data, phone numbers, credit card account balances and in some cases, the amount of debt. The data has been collected since 2015 and is updated weekly. In October, 19,823 entries were made.

It appeared in the Internet on October 13. The data can be sold in any volume and can be picked by the criteria the client is interested in, like the region, the sum on a card or the volume of debt.

Unlike the previous leak, the base contains audio files of the last conversation of clients with Sberbank’s call center. The seller said that he was a second-hand dealer and sold an entry for 30 rubles.

Ashot Oganesyan, the founder and director of DeviceLock, said the new leaked database can be real and the data look new.

“Since the seller says you can get audio records of conversations, the data may have leaked from an external call center, which works with debtors,” he said.

Sberbank admitted a leak of personal data of at least 200 customers on October 3 after media reports. Sellers said that they owned data on 60 million credit cards, both valid and closed. An employee of the bank was later detained, and confessed.

A year ago over 420,000 entries with names of employees and their logins to enter the operational system leaked from Sberbank.

(63.7997 rubles – U.S. $1)

End