Threat Actor: Unknown | Unknown
Victim: Spanish individuals, municipalities, private enterprises, and BMW BANK | Spanish individuals, municipalities, private enterprises, and BMW BANK
Price: Not specified
Exfiltrated Data Type: Bank information, street addresses, identity documents, insurance policies, employment records, client information, insurance information
Additional Information:
- The threat actor claims to have gained administrative access to the company’s Remote Desktop Protocol (RDP).
- The breach has exposed sensitive data belonging to millions of individuals and entities.
- The breach potentially impacts the Spanish branch of BMW BANK, which stores extensive databases containing client and insurance information.
- The cyber attackers now possess the capability to access and manipulate these databases.
- The attackers have demonstrated the ability to retrieve financial receipts, facilitate returns, and extract data into Excel spreadsheets through the company’s administrative accounts.
Threat actor claim to have gained administrative access to the company’s Remote Desktop Protocol (RDP), which generates over 6 million euros in annual turnover. This breach has exposed sensitive data belonging to millions of individuals and entities, encompassing various municipalities, private enterprises and individuals with details ranging from bank information to street addresses, identity documents, insurance policies, and employment records.
Allegedly, Among the entities potentially impacted by this breach is the Spanish branch of BMW BANK, which stores extensive databases containing their client and insurance information. It is believed that the cyber attackers now possess the capability to access and manipulate these databases. Furthermore, they have demonstrated the ability to retrieve financial receipts, facilitate returns, and extract data into Excel spreadsheets through the company’s administrative accounts
Original Source: https://dailydarkweb.net/millions-of-spanish-individuals-data-at-risk-threat-actor-offers-unauthorized-rdp-access-of-a-spanish-company/