VTB Bank Breach Exposed 84,000 Russian Customers in March 2025

HEROIC cataloged the VTB Bank breach on March 13, 2025. One of Russia's largest financial institutions at vtb.com saw 84,000 customer profiles leaked, with 30,096 unique records verified in the HEROIC index. The file carried names, emails, phones, partial card numbers, and geographic identifiers extracted from the customer database.

Why This Database Breach Is Dangerous

Banking leaks stand above everything else in impact. Even partial card numbers, paired with verified names and phone numbers, give fraudsters the raw material for precision phishing and voice-based social engineering. Russian banking customers already navigate a tense cybersecurity environment, and this dump puts concrete account details in criminal hands for targeted fraud and sanctions evasion schemes.

What Was Exposed in the VTB Bank Leak

• Email addresses
• Phone numbers
• First names and last names
• Partial credit card numbers
• Bank names and account identifiers
• Geographic location data

Why This Matters

Fraudsters armed with partial card digits, name, and phone can conduct call-center attacks that pass most identity verification flows. Victims receive calls claiming to be from VTB security, citing the real card ending and location, then are tricked into approving push notifications, reading SMS codes, or moving money to mule accounts. No plaintext password is needed for the scheme to work.

How a Bank Database Breach Happens

Financial institutions face continuous probing from state-aligned and financially motivated threat actors. Entry points range from exploited third-party vendors to phishing of staff and compromised admin credentials. Once inside, attackers pivot to the customer data store and exfiltrate in staged transfers. The data lands on dark web forums, often packaged alongside data from other banks to build comprehensive fraud bundles.

Check If You Are Affected

If you bank with VTB, watch for calls or messages referencing partial card numbers, enable transaction alerts, and avoid approving notifications from unknown sources. Consider rotating your card and adding multi-factor authentication to online banking. Search the HEROIC scanner, which indexes more than 400 billion breached records, to see whether your email appears in the VTB Bank leak.