Data of 30+ million MFO clients from Russia, Kazakhstan and other countries merged into the network

Teacher

Professional
Messages
2,669
Reaction score
819
Points
113
In the hands of hackers were the data of customers of "Zaymer" and other organizations.

Roskomnadzor has information about the data leak of Russian clients of several microfinance organizations and is taking measures to respond. This was announced by a representative of the supervisory authority of RBC. We are talking about the alleged hacking of the infrastructure of the fintech company Robofinance, which serves such MFOs as Zaymer in Russia and Kazakhstan, Digido in the Philippines and Vietloan in Vietnam.

According to open sources, in early March, attackers made several databases with personal information of MFO borrowers publicly available, including:
  1. Zaymer in Russia - 16.8 million customers;
  2. Zaymer in Kazakhstan – 2 million customers;
  3. Digido in the Philippines – 5 million customers in the Philippines;
  4. Vietloan in Vietnam – 2 million customers in Vietnam.
According to hackers, the relevance of the compromised databases refers to March 2024.

On the website of Kazakhstan's Zaymer, it is reported that the company is taking measures to investigate the incident and verify the information. "Personal accounts of MFO borrowers" Robocash.kz " securely protected. The MFO does not store information about bank cards and accounts of its clients, since the process of issuing micro — loans electronically using such data passes only through an independent third-party processing company that processes payments," the statement says.

The Kazakh authorities announced plans to conduct unscheduled inspections of companies that have leaked data from citizens of the country.:

"Based on the results of inspections, if violations of the legal requirements are detected, instructions will be issued against database operators to eliminate the identified violations, as well as administrative fines in the amount of 100 to 1000 MCI, depending on the category of the subject and the composition of the offense," it says. MCI is a monthly calculation indicator used to calculate penalties, taxes and other payments in Kazakhstan. For 2024, it is 3692 tenge, or about 750 rubles.

According to RBC, the Ministry of Digital Development of Kazakhstan also massively sent out notifications to Kazakhstanis whose data was in the hands of intruders, warning about threats from scammers.

On March 14, the same attackers who hacked Robofins said that they allegedly gained access to the data of another microfinance organization "One Click Money" with a database of almost 10 million customer records containing detailed personal data, including: full name, dates of birth, document details, places of work, contact details, including unique phone numbers, etc. email addresses, bank card and e-wallet numbers, as well as Skype accounts and activity dates. The relevance of the data, according to hackers, for February 2024.
 
Top