First BofA, Now Fidelity: Same Vendor Behind Third-Party Breaches

First BofA, Now Fidelity: Same Vendor Behind Third-Party Breaches

March 6, 2024 at 05:31PM

FILI notified 30,000 individuals of a third-party data breach, affecting names, Social Security numbers, bank account details, and more. This is the second breach involving IMS this year. Jeff Margolies points to increased third-party security breaches and the need for better third-party access management. Fidelity offers 24 months of credit monitoring.

After reviewing the meeting notes, the key takeaways are:
– Fidelity Investments Life Insurance Company (FILI) is notifying nearly 30,000 individuals of a third-party data breach affecting their information.
– The breach was reported by third-party service provider Infosys McCamish (IMS) after a cybersecurity event disrupted its services in November.
– The unauthorized actor obtained data stored on IMS systems, potentially including individual names, Social Security numbers, states of residence, bank account and routing numbers, and dates of birth.
– This is the second breach involving IMS this year; last month, Bank of America faced a similar issue after an IMS ransomware attack.
– Jeff Margolies, chief product and strategy officer at Saviynt, emphasized the growing frequency and impact of third-party security breaches, urging enterprises to improve their capabilities in managing third-party access.
– Fidelity is offering affected individuals 24 months of credit monitoring through TransUnion Interactive and advising them to personally review financial statements and credit reports for any fraudulent or suspicious activity.

Full Article