Hacker leaked 3 million people's data after Peru's Interbank refused to pay a ransom

Interbank, one of Peru’s leading financial institutions, said it experienced a data security incident that involved a threat actor infiltrating its network, gaining access to data and leaking it online.

 

Recently, a threat actor using the moniker “kzoldyck” said they infiltrated the internal network of Interbank and stole 3.7 terabytes of data that contained the information of approximately three million customers. 

 

The leaked data contained customers’ names, dates of birth, addresses, phone numbers, emails, credit card data, CVVs, passwords, and more. Additionally, the threat actor claims to have obtained access to API credentials, as well as LDAP and Azure credentials.

 

“More than 3 million customers’ info and in addition to the data I have uploaded here, I also have clear usernames and password information for customers, which allows access to bank accounts from Peru IP block (Restricted to biometric photo validation for some of them),” kzoldyck posted.

 

 

According to screenshots shared by Dark Web Informer, this is just part 1 of the stolen database, indicating that the threat actor may leak more information in the coming days. The screenshots also state that the bank stalled the hacker for almost 20 days and finally refused to pay a ransom.

 

Acknowledging the claims of the hacker, Interbank, in a social media post, said, “We have identified that some data belonging to a group of clients has been exposed by a third party without our authorisation. In response to this situation, we immediately implemented additional security measures to protect our clients’ operations and information.”

 

 

The bank added that most of its channels are operational. “Once we complete the thorough review, we will restore operation to the rest of our channels,” it said.