Gen Digital Inc.

MoneyLion's 10-K Item 1C cybersecurity disclosure describes its risk-management program (NIST/ISO 27001-aligned), Board/Risk & Compliance Committee oversight, CISO-led Information Security and Cybersecurity teams with 24/7 operations in the US and Kuala Lumpur, third-party penetration testing and audits, and a Major Incident Response team. The filing states that in 2023 the company did not identify any cybersecurity threats that materially affected or are reasonably likely to materially affect its business, operations, or financial condition. No specific breach incident is disclosed.

MoneyLion Inc. reported a credential stuffing attack on its platform affecting 8 individuals, including 8 Maine residents. The breach occurred between June 29 and July 30, 2021, and was discovered on August 24, 2021. Acquired data included names and financial account or credit/debit card numbers. Written notification was sent on September 24, 2021.

MoneyLion Inc. notified the New Hampshire Attorney General of a data incident affecting 3 state residents. Unauthorized parties used credentials compromised in a separate prior event to access user accounts between June 29 and July 30, 2021. MoneyLion locked affected accounts, sent notifications, and implemented MFA. No evidence of intrusion into MoneyLion's systems or theft of SSN/financial details from their servers was found.

MoneyLion Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2021-09-24. The breach occurred from 6/29/2021 to 7/30/2021. 4 Montana residents were affected.