International Arrests Made in €30 Million German Banking Hack
Law enforcement in Germany and Brazil have arrested eight individuals in connection with a late 2023 cyberattack that drained approximately €30 million from German bank accounts.
German and Brazilian authorities announced this week that eight individuals have been arrested in connection with a significant cyberattack that occurred in late 2023, resulting in the theft of an estimated €30 million (approximately $34.7 million) from German bank accounts. The arrests are the culmination of an international investigation into the sophisticated operation.
Germany's federal police agency, the BKA, reported that three suspects were apprehended in Europe and charged with fraud. Concurrently, Brazil's federal police, as part of "Operação Klonen" (Operation Clone), arrested four individuals on similar charges and executed 21 search and seizure warrants across the country. These coordinated actions highlight the transnational nature of modern cybercrime.
During a four-day period in November 2023, the perpetrators successfully executed numerous unauthorized withdrawals from the accounts of German online banking users. The BKA stated that the attackers exploited a vulnerability within a payment provider to facilitate these fraudulent transactions. Brazilian authorities indicated that the scheme involved the use of cloned payment cards to access and drain funds.
Following the initial theft, the criminals moved and laundered the illicitly obtained funds through a complex network spanning Brazil and four European countries. This intricate money laundering operation underscores the challenges faced by law enforcement in tracing and recovering stolen assets across multiple jurisdictions.
While neither police agency officially named the affected financial institution, German media reports from late 2023 indicated that Commerzbank, a Frankfurt-based bank, was the target of a €30 million hack. At the time of the incident, Commerzbank assured customers that they would not bear any financial losses. The bank has not yet responded to requests for comment regarding the recent arrests.
The suspects detained in Europe are slated for prosecution in Spain and Bulgaria, with authorities from both nations having provided assistance to the investigation, alongside the Frankfurt public prosecutor's office. In Brazil, courts ordered the seizure of financial assets, vehicles, and real estate valued at over $20 million in connection with the operation.
Adding a peculiar dimension to the case, Brazilian police revealed that one individual involved in the investigation was a candidate for elected office in 2024 and allegedly used a portion of the stolen funds to finance their campaign. Local media identified this individual as a city council candidate in Rio de Janeiro. Furthermore, during the sweep for suspects, Brazilian police also seized a 3-D printer believed to be used in the manufacturing of weapons.
This case exemplifies the growing trend of sophisticated financial cybercrime that requires extensive international cooperation to dismantle. The arrests demonstrate a successful effort by law enforcement agencies to disrupt a significant criminal enterprise and bring those responsible to justice.