Finastra, a leading financial software provider serving many of the world’s largest banks, is grappling with a data breach.
The company acknowledged the incident tech crunch Following claims of breach by hackers finastra‘s internal file transfer platform and subsequent attempts to sell stolen data.
cyber security journalist brian krebs The breach first came to public attention when a hacker posted 400 gigabytes of data allegedly looted from Finastra on a known cybercrime forum.
This trove of information reportedly included confidential client files and internal Finastra documents.
Finastra confirmed to Krebs that data was indeed compromised from its systems in an incident disclosure it shared with customers, but the company declined to provide TechCrunch with a copy of the disclosure. .
Finastra spokeswoman Sofia Romano said the company first became aware of “suspicious activity” on Nov. 7, specifically within its “internally hosted secure file transfer platform (SFTP).” revealed that it was detected.
The hacker who sold the data claimed that the data originated from IBM Aspera, a widely used file transfer software. However, Mr. Finastra does not substantiate this claim.
At this time, Finastra cannot disclose the number of customers affected or the exact nature of the compromised data.
“We are analyzing the affected data to determine which specific customers were affected,” Romano said, adding that the compromised SFTP platform was utilized by all Finastra customers. He added that there was no such thing.
In parallel, Finastra is “evaluating and communicating products that are not dependent on specific versions of the compromised SFTP platform” to ensure continuity of service to unaffected clients.
Initial findings suggest that the breach may have resulted from compromised user credentials, suggesting theft of usernames and passwords.
It remains unclear whether multi-factor authentication was implemented on the compromised systems.
Finastra continues to investigate the root cause of the breach.
Featured image credit: Edited from freepic
