gcdRadar
live/Breaches & attacks/AIR-2026-1894
liveliveBreaches & attacks4 Confirmed real-world loss

СберСпасибо data breach exposes millions of user accounts

СберСпасибо

An online data leak from Russian loyalty program СберСпасибо compromised millions of user accounts containing email addresses, phone numbers, and hashed bank card details. The exposed records date back to a 2023 security incident.

why this severityConfirmed real-world data breach exposing personal identifiable information and card hashes.

first report
11 Nov 2026
last update
11 Nov 2026

Timeline · 1

  1. 11 Nov 2026СберСпасибо (SberSpasibo) data breach exposes 3,288,711 accounts

Sources · 1

News and write-ups

  1. 2026-11-11
    СберСпасибо (SberSpasibo) data breach exposes 3,288,711 accounts
    Have I Been Pwned · haveibeenpwned.com/Breach/SberSpasibo

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 9 Mar 2023 · first reported 11 Nov 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-11-11 04:41Z · updated 2026-11-11 04:41Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# СберСпасибо data breach exposes millions of user accounts

https://gcdradar.vercel.app/incidents/data-breach-exposes-millions-of-user-accounts · AIR-2026-1894 · live

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed real-world data breach exposing personal identifiable information and card hashes.
- Fix status: No fix needed
- First reported: 2026-11-11 (happened 2023-03-09)
- AI role: No AI role
- Products: СберСпасибо

## Summary

An online data leak from Russian loyalty program СберСпасибо compromised millions of user accounts containing email addresses, phone numbers, and hashed bank card details. The exposed records date back to a 2023 security incident.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-11: СберСпасибо (SberSpasibo) data breach exposes 3,288,711 accounts (https://haveibeenpwned.com/Breach/SberSpasibo)

## Sources

- 2026-11-11 Have I Been Pwned: СберСпасибо (SberSpasibo) data breach exposes 3,288,711 accounts https://haveibeenpwned.com/Breach/SberSpasibo

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live