Santander Suffers Third-Party Breach Impacting Customers And Employees 

On Tuesday, Santander bank confirmed in an online statement that customer and employee data was breached following “unauthorized access to a Santander database hosted by a third-party provider.”
 
Santander, the euro zone’s second-biggest bank by market value, said that “certain information” relating to customers in Chile, Spain and Uruguay, and 200,000 current and former employees had been accessed.
 
The bank said it immediately took measures to mitigate the incident, including blocking access to the database and reinforcing fraud prevention to protect customers.
 
Santander hasn’t disclosed how many customers have been affected or the nature of the stolen data.
 
“In the database there is no transactional information or access credentials or internet banking passwords that would allow transactions with the bank,” Santander said.
 
Santander added that its operations and systems have not been affected and customers can continue transactions securely.

Dave Ratner, CEO, HYAS had this to say:

“Yet another report of an unfortunate third-party breach.  While it’s a good thing that no transaction details, credentials, or passwords were exposed, other third-party breach victims may not be so lucky, and these events will unfortunately continue across the industry until organizations adopt appropriate cyber resiliency approaches.”

Third party breaches are a thing. Companies need to take that into account when choosing their partners and ensure that their partners are as secure as they are at the very least. Otherwise, you will get pwned through no fault of your own.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading