Investigation of German Banking Hack Leads to Arrests in Germany, Brazil

• Source: The Record
• Date: 2026-08-15
• Reliability: Tier 2/4 — Established cyber journalism
• Entity: German online-banking customers (Commerzbank reportedly affected)

Summary

German (BKA) and Brazilian federal police announced multiple arrests this week linked to a hack that drained an estimated €30 million (US$34.7 million) from German online-banking accounts over four days in November 2023. Attackers exploited a payment-provider vulnerability and used cloned payment cards, laundering proceeds through Brazil and four European countries.

Key Facts

• ~€30M (US$34.7M) drained from German online accounts over four days in Nov 2023
• Exploited a payment-provider vulnerability + cloned payment cards
• 3 suspects charged in Europe (to be prosecuted in Spain and Bulgaria)
• Operação Klonen (Brazil): 4 arrested, 21 search-and-seizure warrants, seizures worth US$20M+ (financial assets, vehicles, real estate)
• A 2024 Rio de Janeiro city-council candidate allegedly used illicit funds in his campaign
• Confidence: Confirmed (official police announcements)

Impact

A notable cross-border, police-led closure against a card-cloning and banking-fraud network, and a fraud analogue for Australian institutions facing contactless/NFC payment fraud and APRA CPS 234 obligations.

Related Pages

• Sable Squirrel Dropcatch Domains — concurrent Financial / Cyber-fraud related campaign

Sources: The Record; raw/digests/Cyber-Digest-2026-08-16