Investigation of German Banking Hack Leads to Arrests in Germany, Brazil

Summary

German (BKA) and Brazilian federal police announced multiple arrests this week over a November 2023 hack that drained an estimated €30 million (US$34.7 million) from German online-banking accounts — exploiting a payment-provider vulnerability and cloned payment cards, then laundering proceeds through Brazil and four European countries.

Key Details

• Date: 2026-08-15
• Source: The Record
• Reliability: Tier 2/4 — Established cyber journalism
• Type: Cross-border bank-account drain + card cloning + money laundering
• Status: Confirmed (official police announcements — law-enforcement closure, not a new breach)
• Volume: ~€30M (US$34.7M) drained over four days in November 2023
• Arrests: Three charged in Europe (Spain, Bulgaria); Brazil's Operação Klonen arrested four, executed 21 search-and-seizure warrants, seized >US$20M in assets
• TTP: Exploited a payment-provider vulnerability + cloned payment cards; laundered via Brazil and four European countries

Significance

The attack exploited a payment-provider vulnerability and cloned cards to drain accounts — a TTP overlapping contactless/NFC payment fraud that Australian banks manage under APRA CPS 234 safeguarding obligations. The cross-border arrests represent a notable law-enforcement win against large financial-fraud infrastructure.

Related

• Hackers Spend Nearly 7 Million On Expired Domains To Redirect Traffic To Scams A — Parallel criminal infrastructure using payment/fraud adjuncts