In March 2023, data allegedly taken from СберСпасибо (SberSpasibo), the loyalty program of Russian bank Сбербанк (Sberbank), was published online. The data contained records relating to 48M users, including 3.3M unique email addresses alongside phone numbers and dates of birth. Data also included bank card numbers stored as unsalted SHA-1 hashes, plus loyalty program details such as membership dates and the redemption of bonus points for partner offers.
- Breach date: 2023-03-09
- Added to HIBP: 2026-11-11 01:44 UTC
- Compromised accounts: 3,288,711
- Compromised data: Bank card numbers, Dates of birth, Email addresses, Loyalty program details, Phone numbers
- Domain: spasibosberbank.ru
- Verified: Yes
Source: Have I Been Pwned — Breaches · 2026-11-11