Forest Global Training Partners

Cyber Risks · Krebs on Security

Kreditech Investigates Insider Breach

Summary: Kreditech, a Hamburg-based consumer finance startup that lends to "unbanked" consumers, is investigating a data breach after a hacker group calling itself "A4" posted thousands of applicants' personal and financial records on a Tor site, including scanned passports, drivers licenses, national IDs and credit agreements. Kreditech communications head Anna Friedrich acknowledged an "isolated internal security incident" in November 2014 that Hamburg police are investigating, said the company believes the data was leaked from within by someone who worked there, and stated there is no access to any customer data.

Why it matters: Security researcher Corey Wells, who found the Tor site with a crawler, said the leaked files include bank sums and account balances that look like existing customers, and MongoDB logs timestamped Aug. 19, 2014, suggesting the breach may have started seven months before it surfaced.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related