Hackers took use of a recently found zero-day vulnerability in Fortran GoAnywhere MFT's secure file-sharing platform, according to a data breach uncovered by fintech company Hatch Bank.
Hatch Bank took quick action to secure its files before starting a thorough investigation into all pertinent files to identify any potentially sensitive information.
Name and Social Security number are among the details that may have been open to unauthorized access.
Hatch Bank stated that it is striving to put more safeguards in place and provide training for its staff.
The afflicted clients will have access to credit monitoring services through Cyberscout for a full year.
Source: https://securityaffairs.com/143085/data-breach/hatch-bank-goanywhere-mft-bug.html
"id": "HAT182781023",
"linkid": "hatchbank",
"type": "Breach",
"date": "03/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"