Santander staff and '30 million' customers have data hacked in major cyberattack

Santander has been targeted by hackers who have stolen data from millions of people. All staff members as well as customers have been affected.

The hackers are members of the same gang which this week claimed to have carried out a cyberattack on Ticketmaster. The bank, which employs 200,000 people across the world, including about 20,000 in the UK, confirmed data had been stolen.

Santander has apologised for the "concern" this would cause. It said it is "proactively contacting affected customers and employees directly."

It said: "We recently became aware of an unauthorised access to a Santander database hosted by a third-party provider. We immediately implemented measures to contain the incident, including blocking the compromised access to the database and establishing additional fraud prevention controls to protect affected customers.

"Following an investigation, we have now confirmed that certain information relating to customers of Santander Chile, Spain and Uruguay, as well as all current and some former Santander employees of the group had been accessed. Customer data in all other Santander markets and businesses are not affected.

"No transactional data, nor any credentials that would allow transactions to take place on accounts are contained in the database, including online banking details and passwords. The bank's operations and systems are not affected, so customers can continue to transact securely.

"We apologise for the concern this will understandably cause and are proactively contacting affected customers and employees directly. We have also notified regulators and law enforcement and will continue to work closely with them."

In a post on a hacking forum - initially seen by researchers at Dark Web Informer- a group calling themselves ShinyHunters posted an advert claiming to have data including: 30 million people’s bank account details; 6 million account numbers and balances; 28 million credit card numbers and HR information for staff.

However Santander has not commented on the claims. Earlier this week the group claimed to have stolen data from Ticketmaster with the Australian government working with the ticketing firm to look into the claim.