HSBC
November 2, 2018
•[ hack, finance ]
Attackers gain access to some customer's information in HSBC, such as account numbers, balances, addresses, transaction history, etc.. The attack hits about 1% of U.S. accounts and occurred between October 4, 2018 and October 14, 2018.
Bank Islami
October 27, 2018
•[ financial, hack, finance ]
Karachi-based Bank Islami acknowledges of suffering a security breach of its payment cards system but denies reports of having lost an alleged $6 million in what local press have called the biggest cyber-attack in the country's history.
Axa Mexico
October 23, 2018
•[ hack, finance ]
Insurer Axa reveals it suffered a cyber attack that prompted an alert from the Mexico central bank, however clients' information and resources are safe and have not been affected.
Davos in the Desert
October 22, 2018
•[ hack, finance ]
The website of the Saudi Arabian investment conference, referred to as "Davos in the Desert", is defaced with anti-Saudi messages, to protest against the death of journalist Jamal Khashoggi.
GoldSilver
October 21, 2018
•[ leak, misconfiguration, finance ]
In October 2018, the bullion education and dealer services site GoldSilver suffered a data breach that exposed 243k unique email addresses spanning customers and mailing list subscribers. An extensive amount of personal information on customers was obtained including names, addresses, phone numbers, purchases and passwords and answers to security questions stored as MD5 hashes. In a small number of cases, passport, social security numbers and partial credit card data was also exposed. The data breach and source code belonging to GoldSilver was publicly posted on a dark web service where it remained months later. When notified about the incident, GoldSilver advised that "all affected customers have been directly notified".
SpankChain
October 6, 2018
•[ financial, misconfiguration, finance ]
SpankChain, an adult industry focused cryptocurrency, has $38,000 worth of Ethereum stolen due to a smart contract bug.
US Banks
October 2, 2018
•[ financial, malware, finance ]
A joint technical alert from the DHS, the FBI, and the Treasury warns about a new ATM cash-out scheme, dubbed "FASTCash," used by the Hidden Cobra APT.
SBM Holdings (State Bank of Mauritius India)
October 2, 2018
•[ financial, finance ]
Mauritius banking group SBM Holdings unveils that its Indian operations suffered a cyber fraud earlier in the week, and that the bank has potentially lost up to $14 million worth. The bank is able to recover $10 million.
pigeoncoin
September 26, 2018
•[ financial, malware, finance ]
The developers behind the pigeoncoin cryptocurrency confirm that an unknown attacker successfully took advantage of a bitcoin bug, printing 235 million pigeoncoins worth about $15,000.
Zaif
September 20, 2018
•[ hack, finance ]
Yet another Japan-based cryptocurrency exchange is hacked, losing a 6.7 billion yen (about $60 million worth of cryptocurrency), including 5,966 bitcoins.
C-CEX
September 9, 2018
•[ hack, finance ]
Cryptocurrency exchange C-CEX is hacked. The attackers are successfully able to withdraw all Litecoin (LTC) and Dogecoin (DOGE) from company servers.
Boa Vista SCPC
September 4, 2018
•[ hack, finance ]
Brazilian credit bureau Boa Vista SCPC investigates a possible hack, after a group of hackers called Fatal Error claimed it accessed the database of the company which has more than 350M personal data.
NS Bank
August 30, 2018
•[ financial, finance, phishing ]
Researchers from NetScout Arbor reveal the details of a new campaign carried out by the Cobalt Group via spear phishing. One of the targets is NS Bank.
Atlas
August 27, 2018
•[ hack, finance ]
Atlas, a popular Brazilian cryptocurrency investment platform is hacked. The personal information of over 264,000 of its customers is leaked, including 4,500 records that detail users' balances on the platform.
Bank of Spain
August 26, 2018
•[ hack, ddos, finance ]
Hacktivists from Anonymous Catalonia claim to have taken down the website of Bank of Spain.
Atlas Quantum
August 25, 2018
•[ leak, finance ]
In August 2018, the cryptocurrency investment platform Atlas Quantum suffered a data breach. The breach leaked the personal data of 261k investors on the platform including their names, phone numbers, email addresses and account balances.
Undisclosed cryptocurrency exchange
August 22, 2018
•[ hack, malware, finance ]
Kaspersky Lab reveals the details of Operation AppleJeus, an attack against cryptocurrency exchanges carried out via a trojanized cryptocurrency trading application distributing the Fallchill malware.
Cosmos Bank
August 11, 2018
•[ hack, malware, finance ]
Cyber criminals hack the systems of India's Cosmos Bank and siphon off nearly 944 million rupees ($13.5 million) through simultaneous withdrawals across 28 countries. Unidentified hackers stole customer information through a malware attack on its ATM server.
Altex Exchange
July 30, 2018
•[ financial, misconfiguration, finance ]
Altex Exchange acknowledges that a double-counting bug in Monero (XMR) cryptocurrency did result in a major undisclosed financial loss.
Banks in Chile
July 28, 2018
•[ leak, finance ]
Additional 55,106 cards are leaked in Chile.
