SberPravo

In February 2023 the hacker group known as NLB successfully breached several digital platforms associated with Sberbank the largest financial institution in Russia. By March 2023 the attackers publicly released a database belonging to SberPravo which is a specialized legal assistance platform. The incident resulted in the unauthorized exposure of personal information belonging to approximately 116 thousand registered users. The breach likely occurred through vulnerabilities in the service infrastructure or API exploitation allowing the threat actors to extract sensitive client data and distribute it across various darknet forums and Telegram channels.