Hackers Auction Off Stolen LendingTree Consumers’ Data

(Bloomberg) -- Hackers are selling data about consumers of the LendingTree Inc. subsidiary QuoteWizard after the company detected unauthorized access on a cloud database hosted by Snowflake Inc., according to a person familiar with the matter.

Most Read from Bloomberg

• Russia Is Storing Up a Crime Wave When Its War on Ukraine Ends

• CDK Hackers Want Millions in Ransom to End Car Dealership Outage

• Dubai Real Estate’s Resilience May Signal End of Boom-Bust Cycle

• Global Investors Turn Cautious on Once Favorite Japanese Stocks

• Wall Street’s Smart-Trade Brigade Thrashed Again on Stock Boom

There have been several listings of the data on cybercriminal forums, the person said, asking not be named because they weren’t authorized to speak on the matter. The data is being sold to the highest bidder, they said. The hack has had no impact on operations, and LendingTree is still investigating the size and scope of the theft, the person said. Exactly how the information was stolen wasn’t immediately clear.

“This is an ongoing investigation, and as soon as that investigation is complete we will notify all the impacted customers,” said Arun Sankaran, LendingTree’s chief information security officer.

LendingTree has said that the breach didn’t affect information linked to the parent company or financial account information of QuoteWizard customers.

LendingTree shares were down 3.3% on Friday, and Snowflake stock fell 1%.

LendingTree uses cloud data analytics company Snowflake for its business operations and has said it was notified earlier that its QuoteWizard subsidiary may have been affected. LendingTree said on Tuesday that it was investigating whether it was a victim of a larger hacking campaign against Snowflake clients. In that incident, a hacking group used stolen login details to access Snowflake accounts of as many as 165 of the firm’s customers, according to Google’s Mandiant security business.

“We take these matters seriously, and immediately after hearing from them we launched an internal investigation,” LendingTree spokesperson Megan Greuling said.

Snowflake referred to its June 10 blog post when asked for comment.

(Updates with trading figures in the fifth paragraph.)

Most Read from Bloomberg Businessweek

• How to Do a Four-Day Workweek That Actually Works

• Ilya Sutskever Has a New Plan for Safe Superintelligence

• More Disabled Americans Are Employed, Thanks to Remote Work

• JPMorgan Ignites $40 Billion Rush Into Indian Bonds

• Google DeepMind Shifts From Research Lab to AI Product Factory

©2024 Bloomberg L.P.