Roskomnadzor confirmed a large-scale data leak of MTS Bank clients

Roskomnadzor (RKN) completed an inspection after the publication in the media and social networks of reports about a possible leak of personal data of about 1 million clients of MTS Bank, they said “Vedomosti” in the press service of the supervisory agency. As the RKN clarified, the investigation fully confirmed the fact of the leak.

Based on the results of the inspection, Roskomnadzor “drew up an administrative protocol on violation of the legislation on the protection of personal data, it will be submitted to court,” said a representative of the department. According to current legislation, a financial organization may face a fine in the amount of 60 thousand to 100 thousand rubles.

In September this year in Telegram channels started a database of more than 1 million MTS Bank clients was distributed, while the attackers claimed in the announcement that in total they gained access to the data of 21 million people. The archive consisted of three files: one of them contained general data about cardholders (full name, telephone numbers, TIN), the other two contained a partial bank card number (the first six and last four digits), issue and expiration dates and card type ( debit, credit, corporate), and the third file also contained 50 thousand unique email addresses of cardholders.

The credit institution itself, after the database appeared, stated that “the leak of banking secrets was not confirmed; the information presented in the database does not allow attackers to carry out financial transactions on behalf of bank clients.”

Read more about the leak in the Kommersant article. “MTS Bank clients were found online.”

Alexander Kislov