Sberbank of Russia Loyalty Programs Center Thank you from Sberbank

The Loyalty Program Center is the operator of the Thank You from Sberbank bonus program.

History

2023: Data breach of 47 million users

On March 9, 2023, it became known about the leakage of data from tens of millions of users of the SberThank loyalty program from Sberbank. This was announced by the profile Telegram channel "Information Leaks." According to him, two files are posted in the public domain, which contain:

• telephones (47.9 million unique numbers);
• e-mail addresses (3.3 million unique addresses);
• hashed ( SHA1 without salt) numbers of bank cards (main card and additional);
• date of birth;
• Creation and update dates of the record (22.07.2015 to 07.06.2022).

According to the Telegram channel, despite the fact that bank card numbers are stored in one of these files in the form of a hash, due to the use of the outdated SHA1 hashing function, there are no problems to "restore" their real values ​ ​ by directly enumerating all the numbers.

It became known about the leakage of data of tens of millions of users of the SberThank loyalty program

According to the magazine "Company," one of the files is 820 MB in size. It includes over 6 million lines with phone numbers, email addresses, dates of birth, registration dates, hashed (cryptographically encrypted) bank card data and other proprietary information. The second file "weighs" a little less than 13 gigabytes. Inside - over 48 million lines with email addresses and phone numbers. According to the Company's correspondent, 4.5 million numbers and 132 thousand addresses are unique (not repeated).

We check the information and its accuracy. Such messages often arise and are usually associated with fraudsters who try to sell compilations of old databases under the guise of original ones, SberThank you reported.

The data was released, presumably, by the hacker group NLB. The publication SecurityLab calls it pro-Ukrainian. The same hackers at the end of February 2023 announced the hacking of Sberbank and their readiness to disclose the data of customers and employees. As a first step, they allegedly released the data of customers and employees. " SberLogistics The bank reported that the information about the hack "is not true."^[1]

2017: Main services of the center

The main types of services provided by the Loyalty Program Center for 2017 are the development of a partnership system with trade and service enterprises under the loyalty program, promotion of the program among the bank's clients, as well as accounting for transactions, accrual/write-off of bonuses, and support for mutual settlements between trading partners and the bank under the program.

2011: Establishment of the "Loyalty Program Center"

The Loyalty Program Center was established Sberbank Russia in 2011 to organize and service loyalty programs holders of plastic cards of the Thank You from Sberbank Bank.

Notes