Truist Bank confirms breach after stolen data shows up on hacking forum

Truist Bank confirmed a contained cybersecurity incident in October 2023 after a threat actor named “Sp1d3r” posted for sale alleged stolen data on a hacking forum, claiming to include records for ~65,000 employees, bank transaction details and account numbers, and source code for the bank's IVR system; Truist says it has investigated, notified affected clients, found no Snowflake link, and observed no fraud to date. The actor is also linked to other alleged data sales (Cylance, Advance Auto Parts).