Santander Data Breach
| Company | Banco Santander |
|---|---|
| Breach Date | May 14, 2024 |
| Disclosure Date | May 14, 2024 |
| Records Affected | 30 million |
In May 2024, Banco Santander disclosed that unauthorized access to a database hosted by a third-party provider exposed customer and employee data across several countries. The ShinyHunters hacking group later claimed to have 30 million customer records and offered the data for sale.
What Happened
Santander detected unauthorized access to a database hosted by one of its third-party service providers, later identified as a Snowflake cloud storage account. The bank confirmed that customer data from Chile, Spain, and Uruguay was accessed, along with data for all current and some former employees. The ShinyHunters group listed the stolen data for sale on a hacking forum for $2 million, claiming it included 30 million customer records, 6 million account numbers, 28 million credit card numbers, and HR information for bank staff. Santander clarified that no transactional data or online banking credentials were compromised.
What Data Was Exposed
- Customer names
- Account numbers
- Credit card numbers
- Dates of birth
- Employee HR information
- Addresses
Who Is Affected
Santander customers in Chile, Spain, and Uruguay were affected, along with all current Santander employees and some former employees globally. Customers in other Santander markets including the UK, US, and Brazil were reportedly not affected.
How to Check If You Were Affected
Santander contacted affected customers and employees directly. If you hold accounts with Santander in Chile, Spain, or Uruguay, contact your local branch or call Santander's customer service line. Check for any communications from Santander regarding the breach in your email and physical mail.
What You Should Do Now
- Monitor your Santander account closely for unauthorized transactions
- Request a new credit or debit card from Santander
- Enable transaction alerts on your bank accounts
- Be cautious of calls or emails claiming to be from Santander
- Never share banking credentials or one-time passwords with callers
- Consider placing a credit freeze if you are in an affected country
Last updated: February 10, 2026