NCR Barred Mint, Quick Books from Banking Platform During Account Takeover Storm
Summary: NCR Corp. temporarily blocked third-party data aggregators Mint and QuickBooks Online from accessing its Digital Insight online banking platform in late October 2019 after a series of bank account takeovers, then rescinded the block after confirming the incident was contained. A credit union CSO told KrebsOnSecurity that several dozen customer accounts were hacked over a week in distinct 12-hour periods, with a new account accessed every five to ten minutes, and that in many cases the aggregator did not pass through the bank's multi-factor authentication prompts.
Key Takeaway: Attackers needed only a username and password to reach customer accounts because aggregator connections bypassed the bank's second factor, and the same credential-stuffing attack has likely already moved on to one of several thousand other small banks.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026