Santander Bank Spain Targeted in Alleged Data Breach Impacting Approximately 10,000 Records
Published
Key Takeaways
- Threat actor claim: An entity known as BreachParty claims it has compromised Banco Santander and is selling its data.
- Data scope: The actor claims to possess 10,000 records containing personally identifiable information (PII) and financial details.
- Status: The alleged breach, observed on November 8, 2025, is currently pending verification.
The threat actor "BreachParty" has claimed responsibility for an alleged Santander Bank data breach. The assertion, made on November 8, 2025, indicates that the actor is attempting to sell a database containing approximately 10,000 records purportedly belonging to the bank's customers in Spain.Â
The situation is being closely monitored, but the authenticity of the breach has not yet been verified.
Has Santander Bank been hacked?
According to the claims made by the BreachParty threat actor, the compromised dataset includes highly sensitive information.Â
The actor specified that the records contain:
- full names,Â
- official identification numbers,Â
- dates of birth,Â
- phone numbers,Â
- International Bank Account Numbers (IBANs).
The potential exposure of such comprehensive PII and financial data represents a significant security incident if confirmed.
This type of data is highly valuable on cybercriminal forums and could be exploited for identity theft, phishing campaigns, and direct financial fraud, amplifying the data security risks for affected individuals.
Implications for Financial Sector Cybercrime
This alleged incident highlights the persistent and targeted nature of financial sector cybercrime. Threat actors like BreachParty continuously seek to exploit vulnerabilities within banking infrastructure to acquire monetizable data.Â
For the financial industry, such claims—even if unverified—underscore the critical importance of robust multi-layered security protocols, continuous threat monitoring, and rapid incident response planning.Â
The outcome of the verification process will be critical in determining the full impact on Santander Bank’s Spain branch and its customers.
This claim follows a similar one made by the same actor just days prior, involving customer data from another major European financial institution, ING Bank Spain, that allegedly impacted 21,000 records.
In June 2024, the U.K. Santander Bank announced a security breach that impacted its entire staff and some 30 million clients, which was claimed by ShinyHunters – a name linked to Kering's Gucci, Balenciaga, and McQueen breach and the Allianz Life data breach.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular