Financial Institution Service Corp. repots MOVEit related data breach
Learn More
Financial Institution Service Corp. (FISC) reported a data breach caused by a critical vulnerability within the MOVEit file-transfer application.
On May 31, 2023, Progress Software made a public announcement regarding a vulnerability present within MOVEit, prompting swift action from FISC upon learning of this vulnerability. The company installed all available patches and implemented comprehensive measures to mitigate the potential threats posed by unauthorized access. Additionally, FISC launched a thorough investigation to evaluate the impact.
This flaw had been exploited by hackers, compromising the personal data of over 750,000 individuals. The breach exposed consumers' sensitive details, including:
- names,
- addresses,
- dates of birth,
- Social Security numbers,
- driver’s license numbers,
- government-issued identification numbers,
- financial account information,
- telephone numbers,
- credit and/or debit card numbers.
FISC explicitly noted that the incident impacted numerous financial institutions listed below:
- Hodge Bank & Trust Co.,
- American Bank, Inc.,
- First National Bank in DeRidder,
- Lakeside Bank,
- Jackson Parish Bank,
- Heritage Bank of St Tammany,
- Concordia Bank & Trust Company,
- First Liberty Bank,
- Farmers State Bank & Trust Company,
- The Cottonport Bank,
- Citizens Bank & Trust Co.,
- RiverHills Bank,
- Gibsland Bank & Trust,
- Sabine State Bank,
- Anthem Bank & Trust,
- Delta Bank,
- Louisiana National Bank,
- Vermilion Bank,
- Security State Bank of Oklahoma,
- Winnsboro State Bank & Trust Company,
- Bank of Moundville,
- Merchants & Planters Bank,
- American Bank & Trust Company,
- Bank of Oak Ridge,
- Resource Bank,
- Bank of Winnfield and Trust Company,
- Homeland Bank,
- Crescent Bank,
- Marion State Bank,
- Plaquemine Bank and Trust Co.,
- Peoples Bank,
- City Bank and Trust Company,
- Washington State Bank,
- Metairie Bank,
- Jonesboro State Bank,
- Caldwell Bank and Trust,
- Citizens Progressive Bank.
On September 22, 2023, Financial Institution Service Corporation initiated the distribution of data breach letters to all individuals impacted by this recent data security incident, providing victims with a comprehensive list of the compromised information pertaining to them.