Hackers leak World-Check database containing sanctions and crime records
Hackers (name GhostR) have compromised and exposed the London Stock Exchange Group’s (LSEG) World-Check screening database, which contains over five million records including details on politically exposed persons (PEPs), criminals, risky organizations, and other entities. The database was posted on a notorious forum known for sharing stolen data. The perpetrators, who identify themselves as GhostR, assert that they acquired the database containing 5.2 million records in March.
The Cybernews research team has examined a sample of the data provided by the attackers and has confirmed its authenticity. LSEG has responded to inquiries from Cybernews, stating that the security breach did not affect any of the company’s own systems.
“This was not a security breach of LSEG/our systems. The incident involves a client’s data set, which includes a copy of the World-Check data file. This was illegally obtained from the client’s system. We are liaising with the client, to ensure our data is protected and ensuring that any appropriate authorities are notified,” LSEG said in a statement shared with Cybernews.
The LSEG World-Check database allows users to perform “know your customer” checks (KYC) to comply with regulations and avoid entering partnerships with persons or entities involved in financial crime, terrorism, or other illicit activities.
The stolen data includes individuals’ names, surnames, job titles, background information, entity names, and the reasons for their inclusion in the list. The records contain thousands of people, diplomats, government officials, numerous private companies, individuals involved in organized crimes, intelligence operatives, suspected terrorists, and other information.
In a separate post announcing a different breach, GhostR revealed that the World-Check database was obtained after attackers penetrated Mustafa Centre, a Singapore-based 24-hour shopping mall that used the database.
The LSEG gained ownership of the database after it acquired the database’s creator, the financial data provider Refinitiv.
Source: https://cybernews.com/news/lseg-world-check-database-leak/