ABN AMRO Bank Says Ransomware Attack Potentially Exposed Client Data

Last week, ABN AMRO’s supplier, AddComm, experienced a ransomware attack that may have exposed data belonging to a limited number of ABN AMRO clients.

ABN AMRO is a prominent Dutch bank headquartered in Amsterdam. It is one of the largest banks in the Netherlands, serving around 5 million retail clients, 400,000 business clients, and thousands of corporate clients.

The bank has assured clients via a statement published on its website that its own systems were not compromised and is taking steps to notify potentially affected customers.

Indirect breach on ABN AMRO

The attack on AddComm occurred between May 5 and May 17, 2024. On May 17, AddComm identified the ransomware when its systems were encrypted. Upon discovery, AddComm engaged external cybersecurity experts to manage the situation and conduct forensic investigations. Systems have since been restored, and connections with customers are being re-established securely. Although the exact data compromised is still being investigated, the breach might include client names and addresses.

AddComm promptly notified its customers, including ABN AMRO, of the breach. ABN AMRO has ceased using AddComm’s services temporarily. External cybersecurity experts are examining the extent of the data theft at AddComm. ABN AMRO has reported the breach to the Dutch Data Protection Authority and relevant regulators. The bank is proactively informing potentially impacted clients in writing and offering guidance on safeguarding against fraud.

Client advisory

Clients are advised to remain vigilant against potential fraud attempts. Here are the key precautions to follow as suggested by ABN AMRO:

• Avoid opening emails, clicking links, or downloading attachments from unknown senders.
• Be cautious of any requests for personal information, such as security codes or bank card details.
• Do not share security codes or bank cards, transfer money via email or text message links, download software for remote access to banking, or provide bank cards during home visits.

Clients should immediately report suspicious activities or direct contact from cybercriminals to their bank and the police.

AddComm is preparing to file a police report and has set up a dedicated mailbox for customer inquiries (privacy@addcomm.nl).

While the breach did not affect ABN AMRO’s internal systems, vigilance and prompt reporting of any suspicious activity remain crucial for clients potentially impacted by the AddComm ransomware attack.