FIDELITY NATIONAL INFORMATION SERVICES, INC.
bd_c92fcc25ac8a7c68 · schema v1 · pii pii-v1
Full breach record for FIDELITY NATIONAL INFORMATION SERVICES, INC. →Fidelity National Information Services, Inc. reported a data breach affecting H&R Block Emerald Card customers. A third-party service provider using Progress Software's MOVEit Transfer tool was compromised via a previously unknown vulnerability (zero-day) between May 27 and May 31, 2023. FNS became aware of the unauthorized acquisition on July 12, 2023. Affected data includes names, addresses, SSNs, DOBs, driver's license numbers, email addresses, phone numbers, and card account details. FNS suspended the tool, patched the vulnerability, and offered two years of identity monitoring.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_c13bfda88a3242d4Oregon State AGfiled 2023-10-04Candidate
- bd_7d8643b052109cd4California State AGfiled 2023-11-09(36d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-574655
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 4, 2023
- Raw hash
- d45803eabe8dc0889b231d338c90f404125f7fb0b344a2d927bbdb4e64c346a7
Reporting entity
- Name
- FIDELITY NATIONAL INFORMATION SERVICES, INC.norm: fidelity national information
Victim entity
- Name
- FIDELITY NATIONAL INFORMATION SERVICES, INC.norm: fidelity national information
Incident
- Discovered
- Jul 12, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.