Deutsche Bank Investigates Ransomware Breach by Unsafe Group

Deutsche Bank is probing a cybersecurity incident involving an external service provider after the ransomware group Unsafe claimed to have breached the bank and leaked employee data. The group published screenshots on a dark web leak site, allegedly showing database extracts containing sensitive employee information, including email addresses and password hashes. Although the bank stated that its internal systems were not compromised, the incident raises concerns about potential phishing attacks and further compromises. Cybernews researchers noted that while the data appears to be limited to employee records, it could still pose significant risks. Unsafe operates under a ransomware-as-a-service model and has recently resurfaced after a quiet period, targeting organizations in multiple countries. Deutsche Bank is collaborating with the affected third-party provider to investigate and mitigate risks.

Key Points: • Unsafe ransomware group claims to have breached Deutsche Bank's external service provider. • Screenshots released show sensitive employee data, but customer information status is unclear. • Deutsche Bank confirms its internal systems remain unaffected and is investigating the incident.