Archetyp Links

Light Mode

Article Details

Serious data leak: Anyone who uses this service must expect identity theft

Published on October 7, 2025

Home page CURRENT FRAUD WARNINGS Serious data leak: Anyone who uses this service must expect identity theft October 7, 2025 at 7:45 p.m. Gerrit Gerbig powered by Hackers have stolen sensitive user data.If you are affected, you are at high risk of identity theft.This is how you can protect yourself. Hackers have stolen highly sensitive data. At the Schufa subsidiary Bonify, sensitive user data such as identification documents and video material were disclosed. According to Bonify, this is not a classic data leak, but data protection authorities were nevertheless involved. Those affected should be vigilant as stolen identity data could be used to commit fraud. A serious security incident occurred at the Schufa subsidiary Bonify.Unknown attackers are said to have gained access to particularly sensitive user data that can be misused for identity theft. A statement from Bonify shows that no credit or account details, passwords or bank details were stolen.However, data that was collected for identity checks: ID documents, video identification material, address and photos. What is Bonify? Bonify is a digital platform through which you can view and manage your credit information (e.g. Schufa score or tenant information).Schufa took over Bonify in 2022, but the company continues to operate as its own business unit.In this role, Bonify collects in particular identity data via video identification process, address, ID details and other information that is used for verification. Virus protection put to the test: Who is really shutting down?The best antivirus suites 2025 6 providers, umpteen promises: We have examined the current security suites and VPN extensions.Where you can get real all-round protection - and who only tempts you with cheap prices for the first year. You have to do this now If you are affected by the data leak, the consequences can be fatal.Cybercriminals could use the stolen data to conclude contracts or open bank accounts in your name.Therefore, you should adhere to the following advice: Check whether you have ever carried out identity verification with Bonify - especially with ID details or Video-Ident. Watch your mail and email carefully for unusual activity. If you suspect identity misuse, report it to the police. Keep copies of ID cards and sensitive documents in safe places and find out about possible measures to protect your identity (e.g. reporting to authorities). All those affected should have already been informed by bonify by email or post.It is still unclear how many users' data was stolen. If you have identified yourself exclusively via eID, letter ID or your bank account, you don't have to worry.Because in this case, according to current knowledge, your data was not stolen. Claim for damages Because it involves sensitive personal data, the incident could violate provisions of the General Data Protection Regulation (GDPR).As a victim, you could be entitled to non-material damages - even if no financial damage was incurred.Platform operators and service providers could also be held liable if they are proven to be negligent in data security. Previous vulnerabilities According to the Süddeutsche Zeitung, this is not the first incident of this kind at bonify.A serious security gap in the Bonify app has already been reported in the past. For example, the IT expert Lilith Wittmann was able to access rental credit information for strangers by manipulating the app.At that time, the app was temporarily taken offline and the gap was fixed. If you have any questions about the Bonify data theft, you can call 030/75 66 58 89 or send an email to [email protected].