Abrigo takes Sageworks offline over 'irregular activity'; borrower-facing features still down
Fintech vendor Abrigo took its Sageworks risk management application offline on October 30 at about 11:25 am ET after detecting "irregular activity" in its environment. The outage ran through the weekend. As of November 2, most functionality is restored, except borrower-facing features. Abrigo serves more than 2,400 community banks and credit unions in the US, and Sageworks handles sensitive banking customer data. Abrigo has not said whether the incident was a breach or a technical fault. Earlier this year, an actor allegedly tied to ShinyHunters claimed to have stolen 1.7 million Salesforce records from Abrigo. That claim has not been confirmed.
Detalhes técnicos
- Affected services: Online Portal Now, Sageworks Analyst and Sageworks API.
- Abrigo has given no details on the nature, cause or scope of the incident, and BleepingComputer received no reply to its request for comment.
- The earlier ShinyHunters claim covered full names, email addresses, phone numbers, and employee and account data. The claim has not been confirmed, and the nature of the current incident has not been disclosed.
Remediação
- Some researchers advised banks and credit unions using Abrigo solutions to rotate their Sageworks API keys.
Linha do tempo
-
Abrigo takes Sageworks offline over 'irregular activity'; borrower-facing features still down
ler a análise desta fonte ocultar
Fintech vendor Abrigo took its Sageworks risk management application offline on October 30 at about 11:25 am ET after detecting "irregular activity" in its environment. The outage ran through the weekend. As of November 2, most functionality is restored, except borrower-facing features. Abrigo serves more than 2,400 community banks and credit unions in the US, and Sageworks handles sensitive banking customer data. Abrigo has not said whether the incident was a breach or a technical fault. Earlier this year, an actor allegedly tied to ShinyHunters claimed to have stolen 1.7 million Salesforce records from Abrigo. That claim has not been confirmed.
Technical Details
- Affected services: Online Portal Now, Sageworks Analyst and Sageworks API.
- Abrigo has given no details on the nature, cause or scope of the incident, and BleepingComputer received no reply to its request for comment.
- The earlier ShinyHunters claim covered full names, email addresses, phone numbers, and employee and account data. The claim has not been confirmed, and the nature of the current incident has not been disclosed.
Remediation
- Some researchers advised banks and credit unions using Abrigo solutions to rotate their Sageworks API keys.