A database containing personal information of about 2,000 PAO Sberbank of Russia credit card holders was found on an illegal Internet forum, Vedomosti reported Oct. 7.
The database includes various information about Sberbank clients, such as names, passport details and card numbers/limits, and could be part of a larger data leak mentioned earlier by Russian media outlets, the newspaper noted.
Kommersant recently said that an unnamed perpetrator reportedly tried to sell data on 60 million Sberbank credit card holders.
Sberbank admitted in its Oct. 7 filing that the recently discovered data leak at the lender affected more clients than initially indicated. The lender said that one of its employees, accused earlier of stealing data of about 200 clients, actually stole and sold the details of 5,000 credit card holders to a criminal group on the "Darknet," although a significant portion of the data was outdated or inactive. The credit cards were reissued and the clients' funds are safe, the bank said.
