Уровень 0 · материалов: 3
В кластер входят документы об уязвимостях безопасности и утечках данных в банковских и финансовых сервисах, но не входят общие обсуждения кибербезопасности без привязки к конкретным утечкам или системным сбоям.
Общие признаки: компрометация персональных данных, уязвимости систем идентификации по номеру телефона, нарушение конфиденциальности в банковском секторе
Группа выше: Утечки персональных данных
Смысл: The text highlights a privacy flaw in Sberbank's online system where a user's partial identity is revealed to anyone who knows their phone number, critiquing the irony of data localization laws when basic privacy is ignored.
Sberbank Online allows users to discover the name and partial card details of others via phone number transfers, exposing a significant privacy gap.
Смысл: The main idea is that Banki.ru is allegedly leaking user phone numbers to predatory microloan lenders almost immediately after registration, exposing a systemic failure in data privacy and a loophole in legal enforcement.
A telecom expert proves Banki.ru leaks user data to microloan spammers using a honeypot test with a clean phone number.
Смысл: The text exposes a dangerous flaw in the integration of Sberbank and Gosuslugi where updating data in the bank can overwrite account ownership on the government portal based on phone number association, regardless of the actual account holder.
A user lost access to her Gosuslugi account because her husband's Sberbank data import overrode her account ownership due to a shared phone number.