Deutsche Bank and ING hire auditors after data leak at Majorel Germany.

After a data leak at the account switching service provider Majorel Deutschland became known in July of this year, Deutsche Bank and ING have now apparently ordered further investigations into the incident by two large auditing firms. Postbank and Comdirect customers were also affected by the data leak.

As Handelsblatt has learned from financial circles, Deutsche Bank has commissioned the Frankfurt auditing firm PricewaterhouseCoopers (PwC) to investigate the events surrounding the hacker attack on the systems of the Majorel subsidiary Kontowechsel24.de.

ING, on the other hand, did not commission an external auditor, but was able to convince Majorel to initiate its own investigations by one of the four major auditing firms. It is still unclear which company Majorel ultimately commissioned. However, both auditors are said to have already started their work on site.

An official confirmation is still pending

Neither Deutsche Bank nor ING nor Majorel nor PwC have wanted to comment on the events so far. A Majorel spokeswoman said she could not provide any further information at the moment because the company is in ongoing proceedings. Spokesmen for Deutsche Bank and ING only confirmed that the two banks were in critical dialogue with their service provider. ING also ensures that“that the incident is carefully processed”.

Cyber ​​attack via Moveit vulnerability

The cause of the data leak was a cyber attack by the Clop hacker group. The attackers exploited a prominent vulnerability in the Moveit data transfer software, which made many well-known companies from various industries the target of malicious actors this year.

It was not until the end of September that it became known that the Majorel data leak affected more Deutsche Bank and ING customers than originally assumed. The attackers published personal data on the darknet, such as full names and IBANs, of bank customers who had used the account switching service handled by Majorel.