Cadence Bank

Cadence Bank disclosed a data breach affecting current and former employees of Hall's Culligan, whose insurance was handled by Cadence Insurance (a Cadence Bank subsidiary). An unauthorized third party exploited a zero-day vulnerability in the MOVEit Transfer application (owned by Progress Software) to access and download data between May 28-31, 2023. Cadence Bank learned of the vulnerability on June 1, 2023. Affected data may include names, addresses, dates of birth, medical/treatment information, and health insurance information. Cadence Bank engaged forensic investigators, notified law enforcement, and implemented security enhancements.