“Attack on computers. We have no control over it.” Banks and Allegro comment on the great data leak

On Monday, “one of the largest one-time leaks in the history of the Polish Internet” could have occurred – the portal trusted by the Internet alarmed. On “Cebulka”, a Polish-language Tor network forum, a huge database has appeared, containing millions of passwords and logins, most of which belong to Poles. The data comes from e.g. from e-mail services, social media, banks and Polish government websites.

Big Data Leak. Allegro: Malware attack on Internet users’ computers

According to the website, the list includes: portal. “We didn’t deal with Allegro because the event was not the result of a breach of our security, but the action of malware (so-called “stealer”) on users’ computers” – commented the company’s press office in a message sent to the website. “There was a malware attack on Internet users’ computers, which caused that personal data or login details for many different websites appeared on the web. Among the users whose computers were attacked, it is very likely that there are also people whose login details for Allegro were stolen.

The big data leak also commented on . Krzysztof Olszewski, the bank’s spokesman, explained that the disclosed data is insufficient to successfully log into the account. Additional authentication is required to use your account. According to banker.pl, there are many indications that only the data saved by some customers in their web browsers were disclosed, and the leak was caused by malware on users’ devices, because “no bank security has been breached”.

ING Bank Śląski explained in turn that it had received information about “a possible leak of payment card data from an external website”. In the interests of customer safety, the bank immediately blocked the cards whose data could be disclosed. “Situations of payment card data leakage from external portals or online stores occur sporadically, which, unfortunately, we have no influence on” – emphasized Magdalena Ostrowska, Senior Communications Manager.

Data leak. The government has launched a special tool

The Minister of Digitization Janusz Cieszyński reacted to the great data leak on Wednesday. On Twitter, he explained that the ministry had launched a website where you can check whether our logins and passwords were leaked. It is enough to log in via the Trusted Profile, and then enter the login or e-mail address that we used to log in to the websites of one of the companies from which confidential information was stolen.