Forest Global Training Partners

Cyber Risks · Krebs on Security

Fintech Giant Finastra Investigating Data Breach

Summary: Finastra, a financial technology firm serving 45 of the world's top 50 banks and roughly 8,100 financial institutions, notified customers on November 8, 2024 that its security team had detected suspicious activity the prior day on its internally hosted file transfer platform. A cybercriminal using the nickname "abyss0" posted on BreachForums offering more than 400 gigabytes of data purportedly stolen from Finastra's largest banking clients, with an earlier October 31 sales thread listing a $20,000 starting price that dropped to $10,000 by November 3.

Bottom line: Finastra's initial evidence points to compromised credentials, and the apparent timeline suggests the intruder had access to the file sharing system at least a week before the company detected suspicious activity - a window in which 400 gigabytes of wire and bank transfer instruction files left the platform. The abyss0 accounts on both Telegram and BreachForums have since disappeared, leaving customers to determine from Finastra's eDiscovery process whether their data was among the exfiltrated files.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related