2024 Refinitiv / LSEG World-Check — third-party copy allegedly exfiltrated; actor claims ~5.3M records (not LSEG core breach)
Data compromised
Sanctions / PEP / adverse-media–style screening attributes per product class—specific columns depend on leaked file/version claims
Technical writeup
Throughout April 2024, TechCrunch, SC Media, Cybernews, and related trade outlets reported criminal threats to circulate a large World-Check dataset—World-Check is an LSEG risk-screening product sold to financial institutions, with branding continuity from the Thomson Reuters / Refinitiv era—after actors claimed roughly 5.3 million records. LSEG spokespeople were widely quoted stating the incident was not a security breach of LSEG’s own systems but involved a client or third-party environment where a copy of the World-Check data file was illegally obtained; the firm said it was coordinating with the affected third party and authorities. This row uses the `refinitiv` directory slug to group the screening-product lineage; treat record totals and full-field impact as predominantly actor/market claims tempered by the corporate framing.
Root cause
Illicit obtainment of a third-party-held copy of licensed World-Check data (per LSEG public statements summarized in trade press)