A threat actor claims to have breached HSBC USA (HSBC), the United States division of the multinational investment bank and financial services holding company. The actor has posted an extensive database for sale, alleging it contains fresh and comprehensive customer data.
According to the actor, the compromised data includes a significant amount of sensitive customer information. The allegedly exfiltrated data includes:
- Full names
- Physical addresses
- Social Security Numbers (SSN)
- Dates of birth
- Phone numbers (mobile, home, and work)
- Email addresses
- Bank account numbers
- Full transaction histories
- Account balances
- Stock and bond holdings
- Credit scores
- Risk tolerance and investment experience
