← HSBC Holdings

2018 Online banking breach — ~14k U.S. customers

2018 14.0K records affected Share on X

Data compromised

Email addresses, Passwords, Names, Addresses, Phone numbers, Dates of birth, Account numbers, Transaction history

Technical writeup

Unauthorized access Oct 4–14. Names, addresses, phones, emails, DOB, account numbers, balances, transaction history, payee info. Credential stuffing suspected.

Root cause

Credential stuffing; password reuse.

References