Another day, another bank, another massive data leak after a 1.5 GB archive containing 15,000 files were shared online
Several sources online, including Cryptome, have published a large number of files allegedly stolen from the systems at Qatar National Bank. QNB is Qatar’s largest bank. The massive data leak allegedly exposes the personal details of hundreds of customers including the ruling family, intelligence officials and Al Jazeera journalists.
The massive data leak appears to contain hundreds of thousands of records including customer transaction logs, personal identification numbers and credit card data. Additionally, dozens of separate folders consist of information on everything from Al Jazeera journalists to what appears to be the Al-Thani Qatar Royal Family.
According to the Qatar-based outlet Doha News, the massive data leak includes files about the country’s secret service, security apparatus and even members of the ruling al-Thani family.
One former Al Jazeera employee, Gordon Hickey, told Doha News that a friend messaged him and said his Qatari bank account and passwords were publicly available under the “SPY” folder. “He was kind of joking, but he did ask whether I was a spy,” Hickey said. “This could have serious implications for me travelling. It’s not a nice thing.”
Another Al Jazeera journalist, Bernard Smith, said the information on his personal account that was found online was accurate. “The details they had for me were mostly correct – I had changed my credit cards just a few months ago after losing them, but other information such as my passwords and contact details were all accurate. “I was very shocked to see my details online.”
On the customer-facing side, the massive data leak contains a number of folders that are likely to concern users. Some of the listed database spreadsheets are labelled: “Account Master”, “User Profile” and “Transactions” however, much like the rest of the contents, IBTimes UK is still in the process of verifying the entire leak. It remains unknown how current the data is – and how or when it made its way into the public domain.
The massive leak was initially uploaded at Global-Files.net however was quickly removed without explanation. Then, a separate well-known whistle-blowing website mirrored the entire data dump in an easily-accessible format.