An unknown number of customers of Deutsche Bank and its subsidiary Postbank have been affected by a data leak. There was a security incident at an external account switching service provider, the financial institution in Frankfurt confirmed.

In the process, personal data was leaked, but with which unknown persons did not gain access to the accounts. According to information from the “Bonner General-Anzeiger”, first names, surnames and IBAN were stolen.

According to Deutsche Bank, it is about customers who used the account switching service in 2016, 2017, 2018 and 2020. The people concerned were informed in writing, a spokesman said. They have been asked to check their accounts for any suspicious charges or unusual activity. Unauthorized direct debits could be returned up to 13 months retrospectively. The money will then be refunded by the bank.

The cause of the incident was identified and remedied by the service provider. More than 100 companies in more than 40 countries are potentially damaged. Deutsche Bank found that its own systems were never affected. The incident is also not related to the IT integration of the Postbank accounts, which has just been completed.