HSBC Bank USA notified customers of a data breach that has happened between Oct 4 and Oct 14. Unknown attackers were able to access online accounts of the financial institution. Exposed info includes customer full name, mailing address, phone number, email address, date of birth, account numbers, account balances, transaction history, payee account information, and statement history where available. HSBC Bank enhanced the authentication process for HSBC Personal Internet Banking, adding an extra layer of security. In March 2017, a spam campaign impersonating UK-based bank attempted to distribute malware masquerading as legitimate security software.”]
Source: https://securityaffairs.co/wordpress/77761/data-breach/hsbc.html