Actor Claims 30,000 Nubank Colombia Customer Records for Sale
Summary
A threat actor claims to have obtained more than 30,000 Banco Nubank Colombia customer records from a debt collection database managed by third-party collectors and is offering the data for $200. The claim is unverified.
Key points
- The alleged breach concerns Banco Nubank Colombia’s debt collection and recovery database.
- The article implicates third-party collection agencies EmergiaCC and Conalcreditos, but provides no independent confirmation of their involvement.
- A threat actor claims the database contains more than 30,000 customer records.
- The claimed records include identification and contact details, financial product numbers, balances, payment promises, account statuses, and debt recovery campaign information.
- The actor is reportedly offering the database for $200 on a dark web forum; the sale and claimed access are unverified.
Article Details
- Victim Organization
- Banco Nubank Colombia
- Incident Type
- Alleged data breach involving a debt collection and recovery database
- Data Types Exposed
- Full names
- National identification document numbers
- Phone numbers
- Financial product numbers
- Payment promise dates and values
- Overdue balances and days in arrears
- Customer account and contact statuses
- Internal debt recovery campaign details
- Affected Records
- Over 30,000 customer records, according to the threat actor's claim
- Ransom Or Extortion
- The threat actor reportedly offered the database for sale on a dark web forum for $200.
- Claim Status
- claimed