Deutsche Bank Investigates Alleged Data Breach Linked to Unsafe Ransomware Gang Deutsche Bank is responding to claims by the Unsafe ransomware gang that its systems were breached, after the group listed the bank on its dark web leak site. The threat actor shared screenshots allegedly containing employee email addresses, physical addresses, internal database records, and password hashes, along with terminal commands suggesting database exports. In a statement to media outlets, Deutsche Bank denied any compromise of its internal networks or systems, attributing the incident to a third-party service provider in Germany. The bank confirmed it was working with the provider to minimize potential cyber risks but provided no further details on the affected vendor. The Unsafe ransomware group, first observed in late 2022, has a sporadic track record, with 16 reported victims primarily in the U.S. and Germany. Despite claiming to be penetration testers and security researchers, the group’s activities align with ransomware operations, including recycling leaks from other threat actors. Their dark web page disclaims responsibility for illegal use of posted data, though their actions remain unauthorized. The incident highlights ongoing risks from third-party vulnerabilities in financial sector supply chains. Investigations are ongoing.