Peru's Interbank reports data breach exposing 3M customers
Learn More
Interbank, a major financial institution in Peru, is reporting a data breach, acknowledging that a threat actor accessed and leaked sensitive customer information online.
The breach compromised internal credentials for Interbank's systems, such as API, LDAP, and Azure credentials. The attacker reportedly attempted to extort the bank but leaked the data after Interbank declined to negotiate.
The attacker, under the alias "kzoldyck," claims to have obtained over 3.7 terabytes of data affecting more than 3 million customers. This data reportedly includes:
- Full names
- Account IDs
- Birth dates
- Addresses
- Phone numbers and email addresses
- IP addresses
- Credit card details, including CVV and expiration dates
- Bank transaction records
- Plaintext usernames and passwords for account access
Some Interbank customers have reported service disruptions, including issues with the bank’s mobile and online platforms, though most services are now operational.
Interbank has not disclosed the nature of the attac nor confirmed the number of affected individuals.
