Sterling Bank is facing a ransom demand from a cybercriminal group following claims of a major data breach that allegedly exposed customer and staff information online.
The attackers, identified as a threat actor known as ByteToBreach, claimed to have published millions of records on a dark web platform, raising concerns about the safety of sensitive data.
According to the claims, the breach involves data linked to about 900,000 customer accounts and over 3,000 employee records. The leaked information is said to include personally identifiable details, which could expose affected individuals to risks such as identity theft and financial fraud.
Reports indicate that the attackers are demanding payment in exchange for deleting the data and preventing further release. In an alleged exchange with a representative of the bank, the threat actor insisted the payment request was non negotiable, stating it was already lower than what is typically demanded in similar cases.
The conversation reportedly ended without any agreement.
The threat actor also claimed that the breach extended beyond the bank’s internal systems, with possible links to external platforms including Remita and CRC Credit Bureau, as well as data associated with Cardinal Stone.
It was further alleged that a large volume of data, including identity documents, bank records, and database files, was accessed during the breach.
However, none of the organisations mentioned have officially confirmed the incident. When contacted earlier, Sterling Bank declined to comment on the claims.
The situation has raised fresh concerns about data security in the financial sector, especially as cyber threats continue to evolve.
