Finastra file transfer system breach exposes personal data
Finastra's internal SFTP system was breached in an attack using stolen credentials, leading to a leak of personal information. The company detected suspicious activity on 7 November 2024 and isolated the platform, while the attacker claimed to be selling 400GB of data. The company began notifying victims in February 2025, and in July it was reported that more than 800,000 Americans had been affected.
Key facts
- Affected organisation
- Finastra
- Incident type
- Data breach
- Occurred / detected
- 2024-11-07
- Scale of damage
- Personal information and Social Security numbers of more than 800,000 Americans exposed
- Cause / method
- Breach of an internal SFTP system using stolen credentials
- Location
- United States
If your data was exposed
Exposed dataNational ID number
Timeline
- The company detected suspicious activity and isolated the compromised SFTP platform.
- It emerged that the attacker claimed to be selling 400GB of data.
- The company began notifying victims of the October 2024 data breach.
- It was reported that more than 800,000 Americans had been affected and their Social Security numbers exposed.
10 related reports
- Fintech Giant Finastra Investigating Data Breach
- Fintech giant Finastra investigates data breach after SFTP hack
- Finastra Announces Data Breach Following Discovery of November 2024 Cyberattack
- Fintech giant Finastra notifies victims of October data breach
- Finastra Starts Notifying People Impacted by Recent Data Breach
- Finastra breach exposed personal data, company tells victims
- Finastra Technology Data Breach Lawsuit Investigation
- Finastra Issues ‘Data Breach’ Notice Following Hacker Attack
- Alleged Data Leak Hits Finastra, Provider to World’s Largest Banks
- Finastra Data Breach Affects Over 800K Americans: SSNs Exposed
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.