leaksear.ch indexed 64,885 records from a Chinese Banks Customer Data Leak dataset tied to clients of major Chinese banks, with a breach date listed as December 1, 2023 (leaksear.ch metadata). Public reporting said a threat actor offered files for sale on a cybercriminal forum and alleged they contained personal and financial data for Chinese bank customers (cybernews.com).
What happened
Cybernews reported on May 6, 2024, that a threat actor had posted files for sale on a cybercriminal forum, claiming the data belonged to customers of multiple banks in China. The report named ICBC, Bank of China, Agricultural Bank of China, China CITIC Bank, Shanghai Pudong Development Bank, China Merchants Bank, and China Construction Bank among the banks referenced in the listing (cybernews.com).
The public forum listing cited by Cybernews claimed a broader dataset of 2,314,340 records and dated the database to December 2023. Cybernews said phone numbers in the sample were valid, but it could not independently verify the full claims about the leak (cybernews.com). leaksear.ch is indexing 64,885 records from the dataset described in the supplied metadata (leaksear.ch metadata).
What data was exposed
The indexed records include searchable address, country, date of birth, name, and phone fields (leaksear.ch metadata). Additional record fields include age bucket, bank account number, bank name, gender, and national ID card number (leaksear.ch metadata). Cybernews reported that the forum listing also described mobile numbers, full names, ID numbers, account numbers, bank details, and demographic information such as province, city, mobile carrier, sex, and dates of birth (cybernews.com).
Why this matters
The combination of name, phone, address, date of birth, bank name, national ID, and account-number fields can make phishing, bank-impersonation calls, and account-takeover attempts more convincing. Security teams monitoring Chinese banking exposure should treat matches as high-context identity and financial-risk leads, while affected individuals should be alert to bank-themed messages that reference personal details. To check whether your data appears in this leak, use the leaksear.ch lookup for the searchable fields associated with this dataset (leaksear.ch metadata).
Check your exposure
Vetted researchers and incident-response teams can request access or sign in if they already have access to check this dataset. Searchable pivots for this leak include address, country, date of birth, name, and phone.