- A hacker group called The Syndicate has allegedly breached Nayax, threatening to release over 100TB of data.
- The stolen data allegedly includes over 1 billion card records, KYC information, customer identities, and internal company secrets.
- The Syndicate has a history of targeting financial companies, but their claims remain unverified and Nayax has not commented.
A hacker group calling itself ‘The Syndicate’ claims to have fully compromised Nayax, an Israeli company that handles payments around the world. The group threatens to release over 100 terabytes of stolen information on July 21.
The Syndicate says they have been inside the internal network of Nayax for close to twelve months. The stolen files allegedly include more than 1 billion credit card records, customer identities, transaction histories, and internal company keys. The group also claims to have source code and infrastructure maps.
Nayax has not commented on the breach. The claims have not been checked by outside experts. Security experts urge caution until the data appears. If the breach is real, it would be one of the largest payment data leaks ever recorded.
Who is the Syndicate?
The Syndicate is the new name in cybercrime – the group emerged in the underground forums early last year. Security experts have noticed their involvement in some significant data breaches.
The group is involved in targeting payment and financial companies. They use social engineering combined with technical hacking for the purpose. They employ phishing emails and other techniques like exploiting weak passwords to gain access to their targets.
The group operates differently compared to other hacker groups. They often announce their breaches beforehand which creates fear and pressure on the victim company. It also generates attention in the media.
The group has claimed responsibility for executing some attacks last year. They attacked a European bank and also a healthcare provider in the United States. However, security experts do not fully believe those claims from The Syndicate, as many think they could exaggerate their capabilities.
The pattern of exaggerated claims is not unique; hackers have also claimed a $600 million Lockheed Martin data sale with similar threats of wider leaks.
The Syndicate uses dark web forums and Telegram for its communication. They use encrypted messaging to avoid detection. The group also demands payment in cryptocurrency.
The name ‘The Syndicate’ suggests the fact that it is organized in its operations. This could mean multiple people working together. But some researchers believe the group has ties to other cybercrime networks.
The claims should be treated with caution, this is because some of the past announcements from the group have turned out to be false. However, the group has also proven capable of real attacks.
What the Hacker Group Claims to Have Stolen
The Syndicate says they have more than 100 terabytes of data from Nayax. This is a huge amount of information. It could fill thousands of hard drives.
The stolen files allegedly include more than 1 billion card records. This would affect millions of people around the world. Credit card numbers are very valuable to criminals.
The data also includes KYC (Know Your Customer) information, such as full names, home addresses, and ID numbers. Criminals can use this to steal identities.
The Syndicate also claims to have prepaid card data. They say they have transaction histories and customer identities. This information could help criminals commit fraud.
The group also claims to have internal company keys and credentials. These allow access to the systems of Nayax. They also claim to have source code and infrastructure maps. This could let criminals find more weaknesses.
The Syndicate says they will release everything on July 21. They also plan to create a search portal. This would let anyone look up card data.
Potential Impact and What People Should Do
If the breach is real, the impact would be huge. Over 1 billion card records could be exposed. Criminals could use the card data to make fake purchases. They could also sell the information on the dark web.
KYC data would make identity theft even easier. Criminals could open bank accounts in other people’s names. They could also apply for loans or credit cards.
The internal company data also creates risks. API keys and credentials could let criminals hack into the systems of Nayax. Source code and infrastructure maps could reveal security weaknesses.
The breach could also damage the reputation of Nayax – customers may lose trust in the company and the trend could also lead to lawsuits and fines.
It is important for people to monitor their finances. They should ensure to report suspicious transactions immediately. They should also check their credit history from time to time.
If someone has a suspicion that fraud is taking place, they should take action and inform their bank. They should also report fraud to the law enforcement agency because of the negative consequences that it can have.
The claims of the hacker may be false. Some hackers exaggerate to get attention. Nayax has not confirmed the breach. Customers should wait for official updates.
For now, people should stay calm but alert. They should check their accounts regularly. Staying informed is also important.
