Maze ransomware operators leak credit card data from Costa Rica’s BCR bank

Maze ransomware operators leak credit card data from Costa Rica’s BCR bank

Maze ransomware operators published credit card details stolen from the Bank of Costa Rica (BCR) threatening to leak other lots every week.


Maze ransomware operators have released credit card data stolen from the Bank of Costa Rica (BCR) threatening to leak other lots every week.


Early May, Maze Ransomware operators claimed to have hacked the network of the state-owned Bank of Costa Rica Banco BCR and to have stolen internal data, including 11 million credit card credentials.


Banco BCR has equity of $806,606,710 and assets of $7,607,483,881, it is one of the most solid banks in Central America.


The hackers claim to have compromised the Banco BCR’s network in August 2019, and had the opportunity to exfiltrate its information before encrypting the files.




According to Maze, the bank’s network remained unsecured at least since February 2020.


Anyway, the group explained that they did not encrypt the bank documents in February, because it “was at least incorrect during the world pandemic”.


The stolen data includes 4 million unique credit card records, and 140,000 allegedly belonging to USA citizens.


Now the Maze ransomware operators published a post on their leak site along with a spreadsheet (2GB in size) containing the payment card numbers from customers of Banco de Costa Rica (BCR).




The threat actors decided to leak the credit card number to lack of security measures implemented by the bank.


Security firm Cyble confirmed the data leak, over 2GB of data.

“Just like previously, the Cyble Research Team has verified the data leak, which consists of a 2GB CSV file containing details of various Masterc ..

Support the originator by clicking the read the rest link below.