Threat actor claims to have breached 365.bank and harvested approximately 3.9 million lines of MongoDB log data via an exposed Actuator endpoint. The exposed data reportedly includes Promise to Pay (PTP) records, customer IBANs, customer names, email addresses, loan amounts, payment schedules, and partner/deal metadata. NB:365.bank previously breached on Wed Aug 05 2026