1/2‼️🇨🇴 Threat actors claim to be selling financial data from SUFI, a financing company within...
Threat actors claim to be selling financial data from SUFI, a Grupo Bancolombia financing company.
Threat actors are claiming to have breached SUFI, a financing company within Colombia's Grupo Bancolombia, and are allegedly selling stolen financial data. The claimed breach includes advisory records, visit records, disbursement records, customer information, GPS coordinates, and transaction details. The incident affects a major Latin American banking group and suggests potential exposure of sensitive customer and operational data.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Grupo Bancolombia?
Get an email when a new story names Grupo Bancolombia, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonSUFI, a financing company within Colombia's Grupo Bancolombia, allegedly suffered a data breach that exposed sensitive financial information including customer data, transaction details, and GPS coordinates. The incident demonstrates how financial institutions remain high-value targets for cybercriminals seeking to monetize personal and financial data. This breach highlights critical gaps in data protection controls and access management within financial services organizations. The exposure of such comprehensive datasets including advisory records, disbursement details, and location data could lead to identity theft, financial fraud, and severe regulatory penalties.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.