Recent Data Leaks
Live
← Back to timeline

Qatar National Bank

Have I Been PwnedConfirmed breachAdded May 1, 2016Occurred July 1, 201588,678 accountsqnb.comAll Qatar National Bank breaches →
What was exposed
Bank account numbersCustomer feedbackDates of birthFinancial transactionsGendersGeographic locationsGovernment issued IDsIP addressesMarital statusesNamesPasswordsPhone numbersPhysical addressesPINsSecurity questions and answersSpoken languages
What to do if you were affected
Details
In July 2015, the Qatar National Bank suffered a data breach which exposed 15k documents totalling 1.4GB and detailing more than 100k accounts with passwords and PINs. The incident was made public some 9 months later in April 2016 when the documents appeared publicly on a file sharing site. Analysis of the breached data suggests the attack began by exploiting a SQL injection flaw in the bank's website.
Frequently asked questions

What is the Qatar National Bank data breach?

In July 2015, the Qatar National Bank suffered a data breach which exposed 15k documents totalling 1.4GB and detailing more than 100k accounts with passwords and PINs. The incident was made public some 9 months later in April 2016 when the documents appeared...

When did the data breach happen?

This data breach occurred around July 2015.

How many accounts were affected?

Around 88,678 accounts were affected.

What information was exposed?

Exposed data included Bank account numbers, Customer feedback, Dates of birth, Financial transactions, Genders, Geographic locations, Government issued IDs and IP addresses.

What should I do if I was affected?

Change your password for this account, and anywhere you reused it. Turn on two-factor authentication. Watch your card and bank statements for unfamiliar charges, and consider requesting a new card number. Place a fraud alert or credit freeze with the major credit bureaus to block new accounts opened in your name. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View on source ↗
Related breaches