Roskomnadzor is checking a possible leak of personal data of MTS Bank clients

Roskomnadzor is checking information about a possible leak of clients’ personal data “MTS Jar”. A representative of the department reported this to Vedomosti.

“As of 12:00 on September 8, 2023, Roskomnadzor has not received notification of the incident from the operator,” a Roskomnadzor representative said in response to a request from Vedomosti.

On September 7, it became known that three files with customer data were made publicly available.MTS Bank”, reported in the Telegram channel “Information Leaks”. The first file of 1 million lines contained the full name, phone number, date of birth, gender, tax identification number, and citizenship of the users. The second of 3 million lines contains the first six and last four digits of the bank card number, the date of issue and expiration of the card and its type (debit, credit, corporate). The third file has 1.8 million unique phone numbers, 50,000 unique email addresses, and numeric IDs.

Hackers from the pro-Ukrainian group NLB announced the leaking of data from MTS Bank clients. From the message of cyber fraudsters posted in the internal chat, it followed that the data of 1 million clients with numbers, emails and card details were publicly available. In total, MTS Bank has a base of 21 million people, the message said.

A representative of MTS Bank later reported that the leak of banking secrets was not confirmed, the company’s infrastructure was not attacked, and user data was “out of danger.” According to the company, the database contains “maximized bank card numbers” issued by different banks. This indicates that “the leak did not occur at any specific bank, but, presumably, at a retail company or digital service provider that stores and processes user payment data in exactly this form,” the bank representative said in response.