Ukraine’s central bank discloses online store breach

The National Bank of Ukraine has taken down its numismatic online store, as hackers may have gained access to the personal data of its users after a cyberattack on a contractor, according to The Record, a news site by cybersecurity firm Recorded Future.

The breach was limited to a third-party provider supporting the online store, which carried numismatic products and collectible coins. The central bank said its systems are designed to isolate contractors from critical operations, preventing the incident from spreading. While hackers may have gained access to registration details, including names, email addresses, phone numbers, and delivery addresses, the NBU said that payment card details, banking information, and other financial data, as well as its core systems, were not affected.

The bank's internal infrastructure also continues to operate normally. As of Friday, the online store remained offline with a notice citing technical maintenance. Authorities have not attributed the intrusion to any specific group.