[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHcvxV9m4dOBKQ9EI6IS_WFXwP-OjTV0DtRDb9I7SMQQ":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"50ed6d58-1be3-427e-a286-fe5126ffde65","🚨🇪🇸 CA Indosuez allegedly targeted in 200K PII database sale\n\nA threat actor on an underground...","ca-indosuez-allegedly-targeted-in-200k-pii-database-sale-a-threat-actor-on-an-un-76f959","🚨🇪🇸 CA Indosuez allegedly targeted in 200K PII database sale\n\nA threat actor on an underground forum is claiming to sell a database allegedly originating from CA Indosuez, a financial group, with the listing focused on its Spanish account holders. The actor describes the data as https:\u002F\u002Ft.co\u002Faf7zxHtPrQ","A threat actor on an underground forum is allegedly offering a database containing approximately 200,000 personally identifiable information (PII) records from CA Indosuez, a financial services group, with the listing specifically targeting Spanish account holders. The actor has posted the data for sale on an illegal marketplace, though verification of the breach's authenticity remains unclear from the excerpt.","Threat actor claims to sell 200K PII records from CA Indosuez Spanish customers on underground forum.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2061823665847562700","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHJ0RmZQXkAILB3B.jpg","2026-06-02T14:54:03+00:00","2026-06-02T15:00:11.455739+00:00",7,[17,20],{"name":18,"type":19},"CA Indosuez","vendor",{"name":21,"type":22},"Unknown threat actor (underground forum)","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":46,"value":47,"context":48},"malware","CA Indosuez database leak","200K PII records allegedly from CA Indosuez Spanish customers offered for sale on underground forum",[18],{"controls":51,"vendors":136},[52,81,107],{"slug":53,"name":54,"problem":55,"products":56},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":82,"name":83,"problem":84,"products":85},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":103,"product_name":104,"url":105,"description":106},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"slug":108,"name":109,"problem":110,"products":111},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":148},"financial-institution-pii-database-exposed-in-underground-market","Financial Institution PII Database Exposed in Underground Market","CA Indosuez allegedly suffered a significant data breach affecting 200,000 customer PII records, now being sold on dark web marketplaces. This incident highlights critical failures in protecting sensitive financial data and customer privacy controls. Financial institutions are prime targets for cybercriminals due to the high value of personal and financial information they hold. The breach demonstrates the importance of implementing robust data protection measures and access controls to prevent unauthorized access to customer databases.",[142,143,144,145,146,147],"CIS Control 3","CIS Control 6","NIST PR.DS-1","NIST DE.CM-8","GDPR Article 32","PCI DSS 3.4",{}]