11 March 2010
HSBC Private Bank (Suisse) SA (the 'bank') today reported on the extent of a serious data theft in Switzerland affecting a proportion of its Swiss-based accounts. Earlier this month, the Swiss authorities passed data files to the bank which showed that client information had been compromised. As a result, the bank is contacting customers to explain and apologise for the threat to their privacy. The bank does not believe that the stolen data has or will allow any third party to access any client account.
It is now clear that the theft, which was perpetrated by a former IT employee about three years ago, involves approximately 15,000 existing clients who had accounts with the bank in Switzerland before October 2006. The stolen client information is limited to accounts in Switzerland, excluding ex-HSBC Guyerzeller accounts. There is no data compromised for any branches of the bank outside Switzerland, which operate on separate systems and security, or other entities within the HSBC Group,
"We deeply regret this situation and unreservedly apologise to our clients for this threat to their privacy," said Alexandre Zeller, CEO of HSBC Private Bank (Suisse) SA. "We are determined to protect our clients’ interests and are taking every necessary measure to do so, actively contacting all our clients with Swiss-based accounts."
Copies of a significant portion of the data were returned to the bank on 3 March 2010 by the Swiss Federal Prosecutor. The French authorities had previously seized the files from the former IT employee, who absconded from Switzerland while under investigation, before passing copies to the Swiss Federal Prosecutor.
The bank is doing its utmost to ensure that this cannot happen again and has already made significant improvements to its security, spending over SFR100 million to upgrade systems and improve security.
The bank is cooperating with the Swiss authorities and continues its own investigations, and a criminal investigation led by the Swiss Federal Prosecutor is underway. The Swiss authorities confirmed to us that they will not support the use of the stolen data to answer requests from foreign authorities. The French authorities have informed the Swiss authorities that the data they hold will not be used inappropriately.
Private Banking is a core business of the HSBC Group. The strength of HSBC's brand, capital position and extensive global network provides a foundation from which Private Banking will continue to deliver professional and personal services in Switzerland and the rest of the world.
Contacts presse :
Pascal Dubey
+41 (0) 79 251 7609
pascal.dubey@hsbcpb.com
Jezz Farr
+44 (0) 7770 605 944
jezz.farr@hsbc.com
Notes to editors:
1. HSBC Private Bank
HSBC Private Bank is the marketing name for the private banking business conducted by the principal private banking subsidiaries of the HSBC Group worldwide. HSBC Private Bank and the private banking activities of HSBC Trinkaus as well as the HSBC Private Banking entities, known collectively as Global Private Banking, provide services to high net worth individuals and their families through over 90 locations in over 40 countries and territories in Europe, the Americas, the Asia-Pacific region, the Middle East and Africa. Private Banking and Wealth Management Services in and from the United States are offered through HSBC Private Bank Americas, a division of HSBC Bank USA, N.A., and HSBC Private Bank International in Miami. HSBC Private Bank’s profits before tax were US$1,108 million for the year ended 31 December 2009 and combined client assets under management were US$460 billion.
2. HSBC Holdings plc
HSBC Holdings plc, the parent company of the HSBC Group, is headquartered in London. The Group serves customers worldwide from around 8,000 offices in 88 countries and territories in Europe, the Asia-Pacific region, the Americas, the Middle East and Africa. With assets of US$2,364 billion at 31 December 2009, HSBC is one of the world’s largest banking and financial services organisations. HSBC is marketed worldwide as ‘the world’s local bank’.