Hackers Allegedly Leak HSBC USA Customer and Financial Information

A threat actor claims responsibility for breaching HSBC USA, the American division of the global investment bank and financial services holding company. The cybercriminal posted an extensive database for sale on underground forums, alleging it contains fresh and comprehensive customer data stolen from the financial institution.

The allegedly exfiltrated data encompasses full names, physical addresses, Social Security Numbers, dates of birth, and multiple phone numbers including mobile, home, and work contact details, with email addresses reportedly exposed as well. The breach purportedly extends to bank account numbers, full transaction histories, and current account balances, alongside investment portfolio details, credit scores, risk tolerance assessments, and investment experience levels.

Such a dataset could enable targeted social engineering or direct access to customer accounts, according to the claims. HSBC USA has not yet publicly confirmed or denied the breach claims, and the article urges customers to stay vigilant and monitor accounts for unusual activity.