Fintech Frenzy: Affirm & Others Emerge as Victims in Evolve Breach

July 2, 2024 at 05:30PM A ransomware attack on a financial services provider has reverberated across its partners, leading to potential exposure of customer data. The attack, launched by the LockBit group, targeted Evolve Bank & Trust, compromising customer information. This has rippled through multiple companies, including Wise and Affirm, prompting investigations and concerns among … Read more

Patelco shuts down banking systems following ransomware attack

July 2, 2024 at 01:51PM Patelco Credit Union, with assets exceeding $9 billion and serving over 400,000 members, disclosed a ransomware attack, resulting in the shutdown of customer-facing banking systems. Services impacted include online banking, transactions, and call center support. Recovery efforts are ongoing, with no definitive timeline provided. Clients are urged to stay vigilant … Read more

FS-ISAC Announces Appointments to Global Board of Directors

June 21, 2024 at 04:36PM FS-ISAC announced its 2024 Board of Directors, adding four new directors and re-electing two incumbents. Kris Fador, CISO for Bank of America, was named Chair. The Board oversees global activities and coordinates with related boards. The new directors bring expertise in cybersecurity and resilience. FS-ISAC thanked outgoing directors and welcomed … Read more

Personal Information of 44,000 Compromised in First American Cyberattack

May 29, 2024 at 06:36AM First American Financial Corporation disclosed a cyberattack compromising personal information of 44,000 individuals, impacting its subsidiaries. The company took systems offline for containment and later restoration. It informed SEC of the data breach and pledged to notify affected individuals, offer credit monitoring, and didn’t disclose the ransomware gang or payment … Read more

First American December data breach impacts 44,000 people

May 28, 2024 at 06:29PM First American Financial Corporation, the second-largest US title insurance company, reported a December cyberattack impacting 44,000 individuals. The California-based company, founded in 1889, offers financial and settlement services to real estate professionals. This breach came a month after settling a 2019 hack and is similar to recent incidents in other … Read more

Nations Direct Mortgage Data Breach Impacts 83,000 Individuals

March 19, 2024 at 08:19AM Nations Direct Mortgage notified over 83,000 individuals of a December 2023 data breach leading to unauthorized access of personal information including names, addresses, and Social Security numbers. The company claims no evidence of data exfiltration or fraudulent use and is offering identity monitoring services. Nations Direct faces a class action … Read more

Investment advisers pay $400K to settle ‘AI washing’ charges

March 18, 2024 at 05:43PM The SEC announced settlements with investment advisers Delphia (USA) and Global Predictions for misleading claims about using AI technology in their services. Both companies agreed to pay $400,000 in civil penalties for “AI washing” activities. The SEC found false representations about AI usage, leading to violations of the Advisers Act. … Read more

American Express Discloses Data Breach

March 5, 2024 at 08:06AM American Express informs customers of a data breach at a third-party services provider, affecting some card members’ account information. Compromised data includes names, card account numbers, and expiration dates. The company is monitoring for fraud and advises impacted individuals on protecting their information. It is unclear how many people were … Read more

Global fintech firm EquiLend offline after recent cyberattack

January 24, 2024 at 11:40AM Global financial technology firm EquiLend faced a cyberattack resulting in system disruptions and unauthorized network access. The company is working to restore affected services, engaging third-party experts for investigation. A recent acquisition by U.S. private equity firm WCAS is pending, with an additional $200 million investment committed. EquiLend’s Next Generation … Read more

ICO fines spam slinging financial services biz

January 22, 2024 at 06:09AM LADH Limited, a financial services company, was fined £50,000 by the UK’s data regulator for illegally sending over 31,000 spam text messages without consent. The company failed to offer recipients the chance to opt out, and claimed to have received consent from a third party without written confirmation. The ICO … Read more