Bank99

Bank99 is a financial institution headquartered in Austria. The name indicates it operates as a bank, offering banking services such as account holding and related financial products to its customers. While the precise range of products and services is not detailed in the available sources, the institution manages customer account information, which includes names and account numbers. Its headquarters in Austria situates it within the European banking environment, subject to Austrian regulatory frameworks and EU financial directives. The organisation serves customers that maintain accounts with it, though the exact customer base size is not disclosed in the provided material. As a bank, it is expected to adhere to standard security and data protection obligations applicable to financial service providers.

In May 2023, Bank99 experienced a significant data breach when a vulnerability in the MOVEit file transfer software used by its service provider Majorel was exploited by attackers. The breach resulted in the unauthorized access and theft of over 144,000 customer data records, which later appeared for sale on darknet markets. The compromised information included sensitive personal details such as customer names and their associated account numbers. This incident highlighted the reliance of Bank99 on third‑party service providers for certain IT functions and the associated supply‑chain risk. The event prompted notifications to affected customers and likely triggered regulatory scrutiny under data protection laws such as the GDPR. The breach remains a notable episode in the organisation’s recent operational history.