Moneris

Moneris recently encountered a ransomware attack attempt, but it did not impact their secure payment processing environments.

However, an unauthorized third party successfully accessed and disclosed specific business information, including Moneris Merchant IDs and locations, issue logs, internal training materials, and details like names and postal addresses associated with legacy gift cards.

In response to the incident, the company collaborated with its internal team and external cyber experts to thoroughly examine the accessed information. They are actively taking appropriate measures to mitigate any potential risks arising from the unauthorized access.

Source: https://www.moneris.com/en/about-moneris/news/november-25,-c-,-update-on-cyber-security-incident

TPRM report: https://scoringcyber.rankiteo.com/company/moneris-solutions

"id": "mon3138124",
"linkid": "moneris-solutions",
"type": "Data Leak",
"date": "11/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Payment Processing',
                        'name': 'Moneris',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Business information',
                                              'Personal information']},
 'description': 'Moneris recently encountered a ransomware attack attempt, but '
                'it did not impact their secure payment processing '
                'environments. However, an unauthorized third party '
                'successfully accessed and disclosed specific business '
                'information, including Moneris Merchant IDs and locations, '
                'issue logs, internal training materials, and details like '
                'names and postal addresses associated with legacy gift cards. '
                'In response to the incident, the company collaborated with '
                'its internal team and external cyber experts to thoroughly '
                'examine the accessed information. They are actively taking '
                'appropriate measures to mitigate any potential risks arising '
                'from the unauthorized access.',
 'impact': {'data_compromised': ['Moneris Merchant IDs',
                                 'Locations',
                                 'Issue logs',
                                 'Internal training materials',
                                 'Names and postal addresses associated with '
                                 'legacy gift cards']},
 'ransomware': {'data_exfiltration': True},
 'response': {'remediation_measures': True, 'third_party_assistance': True},
 'title': 'Moneris Ransomware Attack and Data Breach',
 'type': 'Ransomware Attack and Data Breach'}