2026 Pathstone — forum sale claim (unverified); 614K banking/KYC records alleged
Data compromised
Actor-claimed names, SSNs, payment cards, bank accounts, KYC documents (passports, utility bills), employment/income data, and credit-score fields (~614,000 records alleged)—unverified
Technical writeup
Unverified criminal-forum sale claim — indexed July 4–5, 2026. BreachNews reported a forum account selling what it describes as roughly 614,000 Pathstone Financial customer records, alleging a June 2026 Amazon S3 bucket misconfiguration exposed data between March and June before credentials were rotated. The listing claims SQL and CSV exports with identity, banking, payment-card, and KYC documentation. BreachNews had not verified samples or received a public statement from Pathstone at publication; the same forum account separately listed the alleged Aegis Defense Solutions personnel sale one day later. BreachHistory uses the actor-cited 614K figure labeled unverified pending company confirmation.
Root cause
Unverified cybercrime-forum sale listing alleging June 2026 AWS S3 misconfiguration exposed Pathstone Financial customer database—company had not confirmed at catalog time