2019 Sberbank — 60M credit card records for sale
Data compromised
Credit card data, personal info; no CVV
Technical writeup
Russia's largest-ever banking data breach. Personal info of up to 60 million credit card holders appeared for sale on black market. DeviceLock verified authenticity; Kommersant confirmed breach by finding journalists' card details. Sberbank attributed to insider; offered at 5 rubles per record.
Root cause
Insider; deliberate criminal action of employee