HyperAI

200,000 Legal Entities and Millions of Bank Account Information Are Being Sold on the Dark Web

5 years ago
Information
Dao Wei
特色图像

According to Twitter, a large amount of account information of several Chinese banks is being sold on the dark web. According to the reporter's investigation, the package price of US$3,999 includes 900,000 account information of Agricultural Bank of China. Another account also claimed to sell 20 data packages, including one million bank account data, 1.2 million startup company lists, 200,000 Chinese CEO personal information, etc.

According to a message posted by the Twitter account @Bank Security, a large amount of domestic bank data is being sold.

According to the reporter's investigation, the package priced at US$3,999 includes 900,000 Agricultural Bank of China account information.

Another account also claimed to sell twenty data packages, including millions of bank account data (800,000 lines of Shanghai Bank customer data, 460,000 China Industrial Bank credit card data, 200,000 Shanghai Financial VIP customer data, 100,000 Shanghai Pudong Development Bank customer data), 1.2 million Chinese startup company lists, 200,000 Chinese CEO personal information, etc.

Transaction 1: 900,000 pieces of data from the Agricultural Bank of China, priced at $3,999

One of the data is for sale for $3,999.

Judging from the incomplete screenshots exposed online, the information includes the customer's name, gender, age, ethnicity, mobile phone number, home address and other information.

Different provinces and regions are also marked in the screenshot folder.

Transaction 2: 20 data packages with a huge amount of content

Another set of data with no price specified is even more shocking. In the screenshot, 20 data packages are clearly visible, each of which is extremely sensitive.

The 20 sets of data include 800,000 customer data of Bank of Shanghai, 460,000 credit card information of Industrial Bank of China, 200,000 VIP customer information of Shanghai Financial Management and 100,000 customer information of Shanghai Pudong Development Bank.

According to the pictures attached to the account, the leaked data includes sensitive personal information such as name, address, telephone number, ID number, and business operations.

There is also a directory of 1.2 million startup companies, which includes company name, legal person name, registered address, company business scope, etc., which is close to the scope of corporate information queries such as Tianyancha.

As well as the personal information of 200,000 Chinese CEOs. The information in the screenshot includes the CEO’s name, gender, mobile phone number, company name, etc.

The screenshot also includes a database of 1.2 million Chinese VPNs, etc.

Dark web transactions are ongoing

The account that exposed this information is a Twitter account called Bank Security (@Bank_Security).

The user is mysterious on the social network and focuses on sharing security information related to global banks.

He is also keen on imparting technical content about information security or cyber attacks on his Github and technology website Medium.

To continue following this data leak, you can pay attention to:

https://medium.com/@Bank_Security

https://github.com/BankSecurity

-- over--