SunTrust

SunTrust

SunTrust Bank suffered from a data breach incident in April 2018 which exposed employee data.

Data on 1.5 million customers, including names, addresses, phone numbers, and account balances, may have been taken by a former SunTrust Bank employee.

The business learned that information from some of its contact lists may have been stolen by a former employee.

No personally identifiable information, such as a social security number, account number, PIN, User ID, password, or details from a driver's licence, was included in the contact lists.

According to the bank, the data doesn't appear to contain any personally identifying information, including driver's licence numbers, account numbers, pins, user IDs, or social security numbers.

Source: https://securityaffairs.com/71660/data-breach/suntrust-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/suntrustnowtruist

"id": "sun340251223",
"linkid": "suntrustnowtruist",
"type": "Data Leak",
"date": "04/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 1500000,
                        'industry': 'Banking',
                        'name': 'SunTrust Bank',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'number_of_records_exposed': 1500000,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'phone numbers',
                                              'account balances']},
 'date_detected': '2018-04',
 'description': 'SunTrust Bank suffered from a data breach incident in April '
                '2018 which exposed employee data. Data on 1.5 million '
                'customers, including names, addresses, phone numbers, and '
                'account balances, may have been taken by a former SunTrust '
                'Bank employee.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'account balances']},
 'motivation': 'Unspecified',
 'threat_actor': 'Former SunTrust Bank employee',
 'title': 'SunTrust Bank Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized access by former employee'}
Great! Next, complete checkout for full access to Rankiteo Blog.
Welcome back! You've successfully signed in.
You've successfully subscribed to Rankiteo Blog.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.