Cyber Incident Victim: Banque Cantonale de Genève
Date:
Jan 2015
Location:
Switzerland
Summary
The infamous Hacking Group Rex Mundi is active also in the new year, and after blackmailing Banque Cantonale de Geneve (BCGE), dumps details of about 30,000 banks customers, after the bank rejects the request to pay a ransom of EUR10,000 ($12,000).
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The 9th January 2015, Banque Cantonale de Geneve (BCG), a Swiss bank located in Geneva, Switzerland was hit by a cyber attack that resulted in the theft of sensitive client data. The attacker, identified as Rex Mundi, demanded $12,000 in Bitcoin to release the stolen information.
According to BCG's official statement, the attack occurred through an exfiltration from application server technique, where hackers gained unauthorized access to the bank's systems and extracted sensitive data such as client names, addresses, phone numbers, and email addresses. The bank also confirmed that no financial information or passwords were compromised during the incident.
The motive behind the attack was believed to be financial in nature, with Rex Mundi demanding a ransom in exchange for not releasing the stolen data publicly. However, BCG refused to pay the demanded amount and instead reported the incident to law enforcement agencies.
The cyber attack on Banque Cantonale de Geneve highlights the vulnerability of financial institutions to cyber threats and the need for robust security measures to protect sensitive client information. It also underscores the importance of having a well-defined incident response plan in place, which can help organizations minimize the impact of such attacks.
The 9th January 2015 Banque Cantonale de Geneve cyber attack serves as a reminder to financial institutions and their clients of the need for vigilance against cyber threats. By staying informed about potential security risks and taking proactive measures to protect sensitive data, organizations can reduce the likelihood of falling victim to such attacks in the future.