FIDELITY NATIONAL INFORMATION SERVICES, INC.
bd_7d8643b052109cd4 · schema v1 · pii pii-v1
Full breach record for FIDELITY NATIONAL INFORMATION SERVICES, INC. →Fidelity National Information Services (FIS) disclosed a data security incident involving a third-party service provider using Progress Software's MOVEit Transfer tool. On May 31, 2023, a previously unknown vulnerability (zero-day) in MOVEit was reported. An unauthorized third party accessed files containing personal information (name, financial account numbers, routing numbers, and paycheck amounts) of individuals conducting ACH transactions or receiving payroll via Republic Bank. FIS suspended the tool, patched the vulnerability, engaged forensics, and offered 12 months of identity monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_c13bfda88a3242d4Oregon State AGfiled 2023-10-04(36d gap)Candidate
- bd_c92fcc25ac8a7c68California State AGfiled 2023-10-04(36d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-576312
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2023
- Raw hash
- 23b2667f3405de259f0ed33d3de93cb7811432f821ce2d56aaceed188aa87ce9
Reporting entity
- Name
- FIDELITY NATIONAL INFORMATION SERVICES, INC.norm: fidelity national information
Victim entity
- Name
- FIDELITY NATIONAL INFORMATION SERVICES, INC.norm: fidelity national information
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.