Cybercriminals Threaten Release of Sensitive World-Check Database - Cyber and Fraud Centre

A recent cyber attack has resulted in a serious data breach affecting the World-Check database, a critical tool used by financial institutions and other organisations to identify high-risk individuals and entities. The hacking group GhostR claims to have stolen 5.3 million records and is threatening to leak them online.

What is World-Check?

World-Check is a database containing information about individuals and organisations potentially involved in financial crimes, terrorism, and corruption. It is widely used for Know Your Customer (KYC) processes and due diligence checks to ensure compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations. The database is currently owned by the London Stock Exchange Group (LSEG).

The Nature of the Breach

The hackers allege they gained access to a copy of the World-Check database through a Singapore-based third-party company. While LSEG states that this is not a breach of their own systems, they have confirmed the incident and are working with the affected firm to protect data and notify relevant authorities.

The stolen data is highly sensitive and could include:

Names and contact information.
Passport numbers.
National insurance numbers.
Online cryptocurrency account identifiers.
Bank account information.

Who’s Affected?

The breach comprises information on individuals suspected of involvement in serious crimes, as well as politically exposed persons and former and current government officials. The potential release of this data poses a significant risk to all of those included in the database.

Risks and Consequences

The public release of this data could have severe consequences, including:

Identity theft and fraud: The information could be used to commit identity theft or commit various financial frauds.
Targeted cyberattacks: Individuals listed in the database could become targets of phishing, malware, or other cyberattacks.
Reputational damage: Even if allegations within the database are false, the mere inclusion on it, can cause substantial harm to reputations.

History of Issues

Previous security incidents have exposed errors and inconsistencies within World-Check’s data, leading to wrongful flagging of innocent people. The scale of the current breach significantly amplifies the potential for harm.

Advice for Individuals

If you suspect your information may be compromised, taking proactive steps is crucial:

Monitor accounts: Closely review all financial accounts for any signs of unusual activity.
Change passwords: Update passwords for bank accounts, online services, and email accounts. Use strong, unique passwords for each site.
Consider a credit freeze or protective registration: A credit freeze or signing up for protective registration can prevent identity thieves from opening new accounts in your name.
Report suspicious activity: Immediately report any suspected fraudulent activity to your bank or financial institutions.

The situation is still being investigated and ongoing. Monitor reliable news sources for updates and further guidance as authorities investigate the incident. Further information available at:

https://www.bankinfosecurity.com/hacker-threatens-to-expose-sensitive-world-check-database-a-24909

24.04.24

Threat Intelligence Alerts