HSBC Taiwan · Breach

[Single source] Claim: Actor sells HSBC Taiwan wealth management customer database

Nov 09, 2026 · 1 min read

A threat actor is selling an alleged database of about 79,000 HSBC wealth management customers in Taiwan for $5,700 on a dark web forum. The sample includes names, emails, mobile numbers, partial home addresses, dates of birth and account notes on deposit rates. The claim is unverified and HSBC has not commented.

By HIFY Radar newsroom Updated 11/09/2026 08:25 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor on a dark web forum claims to be selling a database of roughly 79,000 HSBC wealth management customers in Taiwan, with an asking price of $5,700. According to the post and its sample, the advertised data includes names, emails and mobile numbers, partial home addresses, dates of birth and gender, plus account notes on preferential deposit rates. The claim is unverified and is not confirmation of a breach at HSBC.

What happened

Observed

A listing surfaced by the dark web monitoring account DailyDarkWeb reports that a threat actor on a dark web forum is offering what they describe as an HSBC wealth management customer database covering about 79,000 customers in Taiwan, priced at $5,700.

Alleged

The seller's post and accompanying sample claim the records contain customer names, email addresses and mobile numbers, partial home addresses, dates of birth and gender, and account notes referencing preferential time-deposit and demand-deposit rates.

Why it matters

Inferred

Wealth management clients are prime targets for investment-scam calls, and fraudsters who can quote real personal and account details: such as preferential deposit-rate notes: gain significant credibility with their targets.

Inferred

Even if the data did not originate from HSBC's core banking systems, the exposure of a roughly 79,000-person list of affluent customers would carry elevated fraud, targeting and reputational risk for the affected clients and the bank.

What to do

Inferred

HSBC wealth management customers in Taiwan should treat unsolicited calls or messages that quote their real personal details: name, partial address, date of birth, or deposit-rate notes: as potential scam approaches and verify any financial offer through official HSBC channels before acting on it.

Inferred

Observers and organizations should hold off on treating the listing as a confirmed breach of HSBC systems until HSBC, Taiwanese regulators, or independent researchers validate the data, since the claim currently rests solely on the seller's forum post.

Confirmed and still uncertain

Observed

Known: a dark web listing exists claiming an HSBC Taiwan wealth management customer database of about 79,000 records for $5,700, with a sample showing the personal and account fields described above; the listing was publicized by DailyDarkWeb with explicit caveats that it is an unverified threat-actor claim.

Observed

Unknown: whether the data is genuine or current, where it actually originated, and whether HSBC's own systems were compromised at all. As of the report, HSBC had issued no statement, and no independent confirmation of the dataset existed.

What people are saying

Observed

DailyDarkWeb, the account that surfaced the listing, stresses this is an unverified threat-actor claim and not confirmation of a breach, noting the sample looks like a marketing or product-eligibility list rather than core banking data, so a third-party, agent or vendor export cannot be ruled out.

Observed

HSBC has made no public statement on the listing as of the reporting, leaving the seller's claims unanswered by the institution named in the advertisement.

Evolution

Observed

The situation currently consists of a single forum listing and its sample data. No buyer confirmation, broader publication of the dataset, or institutional response has been reported yet.

Inferred

Indicators that would shift the picture include HSBC or Taiwanese regulators acknowledging an investigation, the data resurfacing on other forums or leak sites, evidence of fraud campaigns using the quoted details, or the listing being withdrawn.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Observed

The sample shown with the listing includes customer names, emails and mobile numbers, partial home addresses, dates of birth and gender, and account notes on preferential time-deposit and demand-deposit rates.

Inferred

Analyst review of the sample suggests the fields resemble a marketing or product-eligibility list rather than core banking data, indicating the information could have come from a third-party, agent or vendor export rather than HSBC's internal systems.

Sources and evidence

Observed

This bulletin rests on a single source: a post by the dark web monitoring account DailyDarkWeb on X, which reports the forum listing, describes the sample fields, and adds analyst caveats about verification and possible non-HSBC origins.

Observed

The underlying forum listing and its claimed dataset have not been independently verified; the current evidence batch contains no HSBC statement, regulatory filing, or second-source confirmation.