Base de dados atribuída ao Banco de la Nación · Breach

Banco de la Nación: actor claims sale of 1 million records

Oct 28, 2026 · 1 min read

Threat actor SWICK ROOT, linked to group TEAMSTARS, is selling for $5,000 in USDT a database attributed to Banco de la Nación, Peru's public bank. The post claims over 1 million records of cardholder and card data, including full card numbers, from 2022 to 2026. The claim is unconfirmed; customers should monitor transactions and beware of phishing.

By HIFY Radar newsroom Updated 10/28/2026 07:32 PM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor named SWICK ROOT, linked to group TEAMSTARS, announced the sale of a database attributed to Banco de la Nación, of Peru, for $5,000 in USDT. The post claims over 1 million records. The bank has not confirmed the claim.

Why it matters

According to the announcement, the database would include cardholder and card data, such as full credit and debit numbers and expiration dates. If confirmed, the exposure would enable direct financial fraud against customers and raise phishing risk. So far, there is no bank confirmation or sample verification.

What to do

Monitor leak channels for samples and for a statement from Banco de la Nación. Customers should review account and card activity and treat suspicious messages with caution. Fraud teams should step up transaction monitoring.

For the technical team

Affected: Base de dados atribuída ao Banco de la Nación, banco público do Peru · Database attributed to Banco de la Nación, Peru's public bank. Per the announcement, cardholder and card data from 2022 to 2026.
Exploitation: Sale announced by actor SWICK ROOT, under group TEAMSTARS, reported by the @Alph4_Sec account on X, with report date 28/10/26. No confirmation of database authenticity or verified exploitation.
Fix: No fix applicable; claim unconfirmed.
Vector: Alleged database leak; the source does not describe the initial vector or how the data was obtained.
More details: Data announced in the post: cardholder names, certificate IDs, full card numbers (credit and debit), card type, credit line, expiration date, card status, and activation date, from 2022 to 2026. Asking price: $5,000 in USDT. Status: for sale.