Banorte data breach: 2.1M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2022-08-18
In August 2022, millions of records from Mexican bank "Banorte" were publicly dumped on a popular hacking forum including 2.1M unique email addresses, physical addresses, names, phone numbers, RFC (tax) numbers, genders and bank balances. Banorte have stated that the data is "outdated", although have not yet indicated how far back it dates to. Anecdotal feedback from HIBP subscribers suggests the data may date back 8 years to 2014. Exposed data: account balances, email addresses, genders, government issued ids, names, phone numbers, physical addresses. The breach dates from Aug 18, 2014; Have I Been Pwned loaded it on Aug 18, 2022.
What to do
- If you had a Banorte account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch