Cyberattack on BHU: Criminals follow through on their threat and expose sensitive data

Banco Hipotecario del Uruguay (BHU) is at the center of a crisis following a devastating cyberattack carried out by the hacker group Crypto24. The criminals, who demanded a ransom after a ransomware attack, followed through on their threat and released part of the more than 700 gigabytes (1,543 pounds) of stolen information after not receiving the requested payment.

In a message posted on a dark web portal, Crypto24 confirmed the leak of sensitive data, which would include customers' personal information, financial records, legal contracts, property documents, credit risk analyses, and technical details of the bank's IT infrastructure.

You may also be interested in...

The group had given BHU a ten-day deadline to comply with their demands. After not receiving a response, the hackers released two files of 9 and 11 MB as samples, along with links that, according to them, allow access to all of the stolen data. This action exposes the bank and its customers to an unprecedented risk.

BHU, which has not yet issued an official statement regarding the leak, is facing serious difficulties in restoring its services. Its website has been offline for six days, although installment payments through Abitab have been enabled as a provisional measure.

You may also be interested in...

This incident marks one of the biggest security scandals at a Uruguayan financial institution, raising serious questions about data protection in the public sector.

The situation puts trust in BHU in check and underscores the urgent need to strengthen the country's cyber defenses against increasingly sophisticated threats.

You may also be interested in...