Sberbank 2023

In early 2023 a database allegedly containing Sberbank user information was published on various underground forums. Investigation revealed that the collection was likely an aggregated dataset compiled from several previous leaks occurring in 2022. The threat actors used data enrichment techniques to combine multiple sources into a single file. The leaked information included sensitive personal details such as full names, mobile phone numbers, and email addresses. While the bank denied a new direct breach of its core systems, the exposure of this consolidated data posed a significant risk for targeted phishing and social engineering attacks against customers in Russia.