Truist Bank Data Breach
The 2023 Truist Bank data breach occurred in October 2023 when the internal systems of Truist Bank (truist.com), a leading U.S. commercial bank, were breached in a cyberattack.
Exposed Data Types
7- Email addresses
- Names
- Job titles
- Phone numbers
- Dates of birth
- Partial credit card data
- Account balances
About This Breach
The stolen dataset was subsequently leaked on BreachForums by ShinyHunters in June 2024 and confirmed by Truist Bank representatives to BleepingComputer.
What information was compromised in the Truist Bank incident?
The leaked archive dump contains corporate employee directories, Active Directory records, customer balances, and account summaries. Verified data classes include:
- Personnel & Contact Credentials: Corporate work and personal email addresses, full names, official job titles, and telephone numbers.
- Demographic & Financial Identifiers: Dates of birth, account balance statements, and partial payment card details.
- Directory Data: Azure Active Directory (AAD) attributes and internal personnel identifiers.
How many accounts were affected?
Standardized RFC 5322 ASCII canonical verification confirmed 76,309 unique valid email addresses across the employee and transaction records.
Security advisory & personal identity protection
The exposure of banking personnel records along with account balances and partial payment card information creates high susceptibility to targeted financial spear-phishing, business email compromise (BEC), and executive impersonation. Impacted individuals and customers should:
- Remain vigilant against unsolicited emails or calls claiming to be from Truist Bank security or fraud prevention teams.
- Ensure robust multi-factor authentication (MFA) is enforced across all banking and corporate accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
