Personal data of 150 thousand Russians who tried to take out a loan from Sovcombank got into the network

More than 150 thousand questionnaires with personal data of Russians who applied for a loan at Sovcombank were published on the Internet in free access. It is reported by RBC.

The data file appeared on a specialized site on the darknet on September 20, it contains profiles of people who applied for a loan in 2019-2020. Each entry includes full name, phone number, passport details, residential address, names and contacts of relatives, data on work and income.

Sovcombank confirmed the leak and said that an employee of an external call center was responsible for it. Back in May 2020, the bank found out that he copied the data of online applications, after which they contacted the police. In December 2020, he was found guilty under the article on disclosure of banking secrecy (Part 3 of Article 183 of the Criminal Code of the Russian Federation) and sentenced to two years probation.

At the same time, as the bank reported, already during the investigation, the employee re-posted an ad for the sale of data in his Telegram channel. Now a new case has been initiated against him - about illegal access to protected computer information (Part 2 of Article 274.1 of the Criminal Code of the Russian Federation).

• According to InfoWatch research , about 80% of data leaks from Russian companies were due to internal breaches. The stolen data is then used by fraudsters to steal funds from the accounts of Russians. According to the Central Bank, banks return only 7% of stolen money.