Santander Database Breach via Third Party

TL;DR

Santander hit by data breach via third-party vendor; investigating now.

AI Summary

Banco Santander, S.A. reported on May 14, 2024, that it became aware of unauthorized access to a Santander database hosted by a third-party provider. The incident involved customer data, and the company is working with the provider to investigate and secure the affected systems. Santander is notifying affected customers and regulatory authorities.

Why It Matters

This incident highlights the cybersecurity risks associated with third-party data hosting and could impact customer trust and lead to regulatory scrutiny for Banco Santander.

Risk Assessment

Risk Level: medium — Data breaches, even through third parties, can lead to significant financial penalties, reputational damage, and loss of customer confidence.

Key Players & Entities

• Banco Santander, S.A. (company) — Registrant
• May 14, 2024 (date) — Date of report and awareness of incident
• Santander database (database) — Affected system
• third-party provider (company) — Host of the affected database

FAQ

Filing Documents

• dp211196_6k.htm (6-K) — 28KB
• image_001.jpg (GRAPHIC) — 3KB
• 0000950103-24-006626.txt ( ) — 34KB

Forward-looking statements

Forward-looking statements Santander hereby warns that this document contains “forward-looking statements” as per the meaning of the U.S. Private Securities Litigation Reform Act of 1995. Such statements can be understood through words and expressions like “expect”, “project”, “anticipate”, “should”, “intend”, “probability”, “risk”, “VaR”, “RoRAC”, “RoRWA”, “TNAV”, “target”, “goal”, “objective”, “estimate”, “future”, “commitment”, “commit”, “focus”, “pledge” and similar expressions. They include (but are not limited to) statements on future business development, shareholder remuneration policy and NFI. While these forward-looking statements represent our judgement and future expectations concerning our business developments and results may differ materially from those anticipated, expected, projected or assumed in forward-looking statements. In particular, forward looking statements are based on current expectations and future estimates about Santander’s and third-parties’ operations and businesses and address matters that are uncertain to varying degrees and may change, including, but not limited to (a) expectations, targets, objectives, strategies and goals relating to environmental, social, safety and governance performance, including expectations regarding future execution of Santander’s and third-parties’ (including governments and other public actors) energy and climate strategies, and the underlying assumptions and estimated impacts on Santander’s and third-parties’ businesses related thereto; (b) Santander’s and third-parties’ approach, plans and expectations in relation to carbon use and targeted reductions of emissions, which may be affected by conflicting i

Forward-looking statements are therefore aspirational,

Forward-looking statements are therefore aspirational, should be regarded as indicative, preliminary and for illustrative purposes only, speak only as of the date of this document, are informed by the knowledge, information and views available on such date and are subject to change without notice. Santander is not required to update or revise any forward-looking statements, regardless of new information, future events or otherwise, except as required by applicable law. Santander does not accept any liability in connection with forward-looking statements except where such liability cannot be limited under overriding provisions of applicable law. Not a securities offer This document and the information it contains does not constitute an offer to sell nor the solicitation of an offer to buy any securities. Past performance does not indicate future outcomes rates must not be construed as suggesting that future performance, share price or results (including earnings per share) will necessarily be the same or higher than in a previous period. Nothing in this document should be taken as a profit and loss forecast. Corporate Communications Ciudad Grupo Santander, edificio Arrecife, planta 2 28660 Boadilla del Monte (Madrid) comunicacion@gruposantander.com www.santander.com - Twitter: @bancosantander 2 SIGNATURE Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized. Banco Santander, S.A. Date: May 14, 2024 By: /s/ Pedro de Mingo Kaminouchi Name: Pedro de Mingo Kaminouchi Title: Head of Regulatory Compliance

View Full Filing

View this 6-K filing on SEC EDGAR