Cyber Risks · Krebs on Security

When Efforts to Contain a Data Breach Backfire

Summary: After the Breached forum listed data allegedly stolen from Grupo Financiero Banorte covering more than 10 million customers, cybersecurity firm Group-IB sent the forum a cease-and-desist letter calling the post fraudulent and asking for its removal. The forum's administrator, Pompompurin, responded by buying the database from seller Holistic-K1ller and leaking it on the forum for anyone to download, writing that Banorte now needed to worry about the data being leaked rather than sold.

What's compelling: Group-IB CEO Dmitriy Volkov said such takedown requests are not common practice for the firm, and the letter turned a for-sale listing into a free download of names, addresses, phone numbers, Mexican tax IDs and email addresses for more than 10 million people.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related