© 2022 Western New York Public Broadcasting Association

140 Lower Terrace
Buffalo, NY 14202

Mailing Address:
Horizons Plaza P.O. Box 1263
Buffalo, NY 14240-1263

Buffalo Toronto Public Media | Phone 716-845-7000
WBFO Newsroom | Phone: 716-845-7040
Your NPR Station
Play Live Radio
Next Up:
0:00
0:00
Available On Air Stations
Donate Today Banner

HSBC confirms U.S. data breach

_104198693_f0160059-8861-4a4d-9e7d-00da1303bc0a.jpg
BBC News
/

HSBC says some of its U.S. customers' bank accounts were hacked in October.

The lender said the perpetrators may have accessed information including account numbers and balances, statement and transaction histories and payee details, as well as users' names, addresses and dates of birth.

It believes fewer than 1 percent of its American clients were affected and it has already contacted those thought to have been exposed. HSBC has offered them "one year of credit monitoring and identity theft protection service."

The bank said the online accounts were breached Oct. 4-14. It is not clear whether the attackers have tried to make use of the data to steal savings.

A template of the alert sent to customers has been posted online by the California Attorney General's Office, although the hack was not limited to that state.

One expert said it appeared the technique involved was a "credential stuffing," in which personal details harvested from elsewhere had been used to gain unauthorized access to the accounts. It is clearly still investigating what happened while taking actions necessary to protect customers and advise regulators.

Related Content