Dutch bank ABN Amro says client data may have been compromised in a ransomware attack at third-party services provider AddComm.
The third-party provider announced that the incident has been contained and that the attackers no longer have access to its systems, which have since been restored, but could not confirm what type of data may have been stolen during the attack.
According to ABN Amro, AddComm distributes physical and digital documents and tokens to its clients and employees. For the time being, ABN Amro has stopped using AddComm’s services.
“Research by external security experts working for AddComm should identify exactly what data has been stolen. Our priority now is to inform our own clients and take measures to minimize the impact of this data breach as far as possible,” ABN Amro said in an incident notice.
ABN Amro also underlined that its systems were not affected by the ransomware attack and that its clients should not worry about their money being at risk.
According to the bank, it is unclear yet whether personal information was stolen in the attack and there is no indication that the threat actor behind the attack has used the stolen information maliciously.
“At the moment, there are no indications that unauthorized parties have in fact used the data of ABN Amro clients,” the bank said, advising clients to remain vigilant of potential phishing attempts.
“ABN Amro has reported the data breach to the Dutch Data Protection Authority and regulators. AddComm is preparing to file a police report,” the bank also said.
Headquartered in Amsterdam, ABN Amro Bank N.V. is the third largest bank in the Netherlands, operating under the direct supervision of the European Central Bank.
Related: Bank of America Customer Data Stolen in Data Breach
Related: OmniVision Says Personal Information Stolen in Ransomware Attack
Related: Akira Ransomware Made Over $42 Million in One Year: Agencies
Related: In Other News: Major Law Firm Hacked, Chinese Bank Pays Ransom, PyPI Security Audit
