On the evening of November 11, 2019, the newspaper “News"Reported that on November 7, information on VTB depositors appeared on sale on the black market: a total of 5,000 rows of data.
The seller told reporters that 3,000 lines out of 5,000 can be bought “first hand” and that such information will cost 10 rubles per line. The remaining 2000 lines can be purchased "second hand" (that is, the seller is not the first owner) at 6 rubles per line.
The fragment of the database that Izvestia had at its disposal contained personal information for 21 VTB depositors, including name, home address, postal code, telephone number, information on the amount of the deposit, and also an email address.
Izvestia checked 10 records through the bank’s mobile application, where when transferring funds you can see the name and first letter of the client’s name. It turned out that the phone numbers are really tied to VTB accounts, and the available personal data coincides with those indicated in the dump. At the same time, journalists managed to quickly contact four depositors who confirmed their full name and the presence of a deposit in a financial organization at the moment. One of the clients said that the deposit amount really coincides with that indicated in the test fragment.
"Interfax"Reports that VTB representatives have already investigated what happened and confirmed the leak:
“It was found out that this information was relevant as of 2016. The bank contacted all customers whose personal information could have been compromised, warned of what had happened and apologized. Their information security is not in danger. Please note that the leak does not contain any data necessary to access the accounts, ”the bank said.
Also, the bank noted that the company has a system of delimiting access rights to information and "on a regular basis, tight control of user actions when working with confidential data is carried out."
Let me remind you that this is not the first leak of data from banking users in recent years. For example, earlier it became known that information on Alfa-Bank credit card holders and Alfa Insurance customers appeared on sale. Even earlier, the media reported several leaks of personal data of Sberbank customers.