FDIC: 2011 FIS Breach Worse Than Reported
Summary: FDIC examiners told FIS's customer banks in a May 24, 2013 report that the company's 2011 breach was a broader network intrusion than the prepaid card fraud FIS described in its May 3, 2011 SEC filing, which cited 7,170 prepaid accounts possibly at risk. The examiners identified over 2,000 touch points exposing internal FIS systems and roughly 100 client financial institutions, and found more than 10,000 instances of default passwords in a November 2012 scan alongside 18,747 past-due network vulnerabilities.
Why it matters: FIS handles core banking for more than 14,000 financial institutions, and the FDIC's leverage in this case was not a fine but a letter to those banks - meaning the pressure to fix basic gaps like default passwords came only after regulators went around the company to its customers.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026