The Banorte Breach Exposed Data for 2.6 Million Bank Customers

HEROIC analysts identified the Banorte breach, a dataset tied to the domain banorte.com. Banorte is a prominent Mexican bank, and this leak surfaced on a widely used hacking forum in August 2022. The exposed dataset includes 2,628,615 records containing email addresses, phone numbers, first and last names, and genders. No passwords were included in this dataset.

The Banorte Breach Exposed Data for 2.6 Million Bank Customers

Even without a password attached, this kind of data is a powerful tool for attackers targeting bank customers specifically. A confirmed name, phone number, and email tied to a real Banorte customer gives scammers everything they need to craft a convincing phishing text or call that impersonates the bank, a tactic that works far better when the attacker already knows real personal details.

What Was Exposed in the Banorte Breach

• 2,628,615 records tied to Banorte customers
• Email addresses
• Phone numbers
• First and last names
• Gender
• No passwords included in this dataset

Why This Matters for Bank Customers

Financial institutions are prime targets because their customer data can be turned directly into fraud. With a real name, phone number, and email in hand, attackers can run highly targeted phishing and smishing campaigns designed to trick customers into revealing banking credentials, one-time codes, or card details, leading straight to account takeover and financial fraud. This kind of data is also useful for identity theft, since it confirms a person's real identity and contact details in one place.

How a Database Breach Like This Happens

A database breach happens when an attacker gains direct access to the records stored behind a website or internal system, whether through a security flaw, stolen credentials, or a misconfigured server, and copies the customer data out. Once extracted, this kind of contact and identity data is typically sold or shared on hacking forums, where scammers use it to build target lists for phishing campaigns rather than to log in directly.

Check If You Were Affected by the Banorte Breach

If you are a Banorte customer, it is worth checking whether your information appeared in this leak, especially since no password was required to expose your name, phone number, and email. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this one, so you can find out in seconds and stay alert to phishing attempts that use your real information.