Major Colombian banks purportedly breached, data leaked

Grupo Bancolombia and Banco De Bogota, two of the leading banks in Colombia, were claimed to have been compromised by the same threat actor, who also exposed data supposedly stolen from the financial entities' systems on DarkForums, according to Cybernews.

Multiple files allegedly obtained from Bancolombia that were leaked by the attacker included screenshots showing an internal content management system that featured customers' names and login and logout timestamps, as well as PDF files with customer and advisor names, location details, and insurance plan information. With the provided information lacking direct contact details, cross-referencing with other exposed data may be necessary to launch targeted intrusions against the compromised individuals, said Cybernews researchers. Such direct contact information was evident in the attacker's listing for Banco de Bogota, which included nearly 30 records with full names, physical addresses, and phone numbers.

"The bank clients exposed in this breach might be at risk of social engineering and phishing attacks. The breach is not verified yet, but customers should be alert to any suspicious correspondence related to their bank account," researchers added.