Unknown hackers attacked the leading Canadian banks Bank of Montreal (BMO) and Simplii Financial, the "daughter" of the Canadian Imperial Bank of Commerce (CIBC). In order to avoid the publication of personal data of banking customers, the attackers demanded from each bank, including through the media, to pay them $ 1 million in cryptocurrency. This was reported by the local CBC television channel.
This is a personal data "less than 50 thousand customers" BMO and about 40 thousand customers Simplii.
As a confirmation of the seriousness of their intentions, hackers attached unencrypted names, social security numbers and answers to control questions of a number of clients to the letters. In addition, they described how they managed to conduct a cyber attack.
Despite this, the BMO press service stated that they do not yet have reliable confirmation of the hack. In this case, the bank believes that both cases are related, and hackers are outside of Canada.
We took steps immediately when the incident occurred and we are confident that exposures identified related to customer data have been closed off.
The investigation of the incident involved the Royal Canadian Mounted Police.