While Finastra has yet to share the number of individuals affected by the data breach and the nature of the exposed data (besides victims' names), the company started sending breach notification letters last week to at least 65 people in the state whose financial account information was stolen (according to filings with the Attorney General's office in Massachusetts). Financial technology giant Finastra is notifying victims of a data breach after their personal information was stolen by unknown attackers who first breached its systems in October 2024. Although Finastra disclosed very limited information in filings with Attorney General offices, the breach is believed to be linked to a (now-deleted) post made by a threat actor known as "abyss0" on the BreachForums online cybercrime community claiming to sell 400GB of data allegedly stolen from Finastra's network. When BleepingComputer asked about the forum post in November, a Finastra spokesperson would neither confirm nor deny if the data belonged to the company, only saying that they had suffered a limited-scope security breach and were evaluating its impact. "On November 7, 2024 Finastra's Security Operations Center (SOC) detected suspicious activity related to an internally hosted Secure File Transfer Platform (SFTP) we use to send files to certain customers," Finastra told BleepingComputer. As the company warned in breach notification letters sent to those impacted by the breach, the security incident was first detected on November 7 after Finastra identified malicious activity on some of its systems. While the company didn't share how the attackers gained access to its systems, cyber threat intelligence firm Bad Packets found that Finastra had multiple Pulse Secure VPN and Citrix ADC (NetScaler) unpatched servers before the attack. A Finastra spokesperson was not immediately available for comment when contacted by BleepingComputer earlier today to provide more details on the October 2024 data breach.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Mon, 17 Feb 2025 15:30:05 +0000