Financial Institution Service Corporation

The Maine Office of the Attorney General reported that Financial Institution Service Corporation (FISC) experienced a data breach involving MOVEit Transfer software and unauthorized access to its server. The breach, which occurred between May 30, 2023, to May 31, 2023, affected approximately 353,309 individuals, including 97 Maine residents whose names, addresses, and financial account information may have been compromised. FISC reported the breach on September 28, 2023, and is offering 12 months of identity theft protection services to those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b6244db6-854f-4582-88d7-d9d13ad4aaee.shtml

TPRM report: https://www.rankiteo.com/company/fisc-ltd

"id": "fis810072525",
"linkid": "fisc-ltd",
"type": "Breach",
"date": "5/2023",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 353309,
                        'industry': 'Finance',
                        'name': 'Financial Institution Service Corporation '
                                '(FISC)',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 353309,
                 'personally_identifiable_information': ['names', 'addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'financial account information']},
 'date_detected': '2023-05-30',
 'date_publicly_disclosed': '2023-09-28',
 'description': 'The Maine Office of the Attorney General reported that '
                'Financial Institution Service Corporation (FISC) experienced '
                'a data breach involving MOVEit Transfer software and '
                'unauthorized access to its server. The breach, which occurred '
                'between May 30, 2023, to May 31, 2023, affected approximately '
                '353,309 individuals, including 97 Maine residents whose '
                'names, addresses, and financial account information may have '
                'been compromised. FISC reported the breach on September 28, '
                '2023, and is offering 12 months of identity theft protection '
                'services to those affected.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'financial account information'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High',
            'systems_affected': ['MOVEit Transfer software', 'server']},
 'references': [{'date_accessed': '2023-09-28',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Offering 12 months of identity theft '
                                        'protection services'},
 'title': 'Data Breach at Financial Institution Service Corporation (FISC)',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer software'}