Actor sells alleged database of 10,000 BBVA México customers
A threat actor on an underground forum is selling an Excel file claimed to contain data on 10,000 BBVA México customers, the country's largest bank. The listing cites names, addresses, phone numbers, products and card details with expiration dates, but no sample was shared and the bank has not confirmed an incident, according to DailyDarkWeb. The claim remains unverified; customers should treat unexpected card-related messages with caution.
What happened
A threat actor on an underground forum is offering an Excel file claimed to hold data on 10,000 BBVA México customers, the country's largest bank, according to DailyDarkWeb. The listing includes names, addresses, phone numbers, products and card details with expiration dates. No sample was shared and the bank has not confirmed an incident.
Why it matters
If real, the mix of card details, addresses and phone numbers is ideal material for bank-impersonation calls and SMS asking customers to verify their cards, per DailyDarkWeb's analyst note. Any company or individual banking with BBVA faces targeted social engineering.
What to do
Instruct customers and staff to treat unexpected calls and messages about cards with caution and reach the bank only through official channels. Track BBVA statements before communicating anything about the case.
For the technical team
- Affected
- BBVA México Base de clientes do BBVA México, o maior banco do país, segundo alegação em fórum subterrâneo · BBVA México customers, allegedly 10,000 records. No specific system or product named.
- Exploitation
- No exploitation reported. Sale listed on an underground forum, reported by DailyDarkWeb. No sample in the listing and no incident confirmation from the bank.
- Fix
- None applicable; claim unverified.
- Vector
- Not described in sources. The origin of the alleged data is unknown; no compromise vector was cited by DailyDarkWeb.
- More details
- Alleged fields: names, addresses, postal codes, city, state, municipality, product information, card details with expiration dates and multiple phone numbers. Announced format: Excel file. DailyDarkWeb analyst note: risk of bank-impersonation calls and SMS asking customers to verify cards.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
