Hilltop Holdings Inc.

Hilltop Securities, a financial services company, reported a data breach affecting one Maine resident. The breach, an external system breach (hacking), occurred on May 27, 2023, and was discovered on July 17, 2023. The compromised information includes names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. The company notified the affected individual on August 28, 2023, and offered 12 months of credit monitoring and identity restoration services through TransUnion.

Hilltop Securities reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-08-28. 4 Indiana residents were affected. 254 individuals affected in total.

PrimeLending notified Montana residents of a data event impacting payment account information (name, account number, routing number) resulting from a third-party vendor's compromise of MOVEit file transfer software. The incident involved a zero-day exploit against the vendor. PrimeLending provided 12 months of credit monitoring services.

PrimeLending, a PlainsCapital Company, experienced an external system breach on May 27, 2023, which was discovered on July 24, 2023. The breach affected 2 Maine residents, compromising their names in combination with financial account numbers or credit/debit card numbers with associated security codes or PINs. Affected individuals were notified on August 23, 2023, and offered 12 months of credit monitoring and identity restoration services.

PrimeLending, a PlainsCapital Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-23. 6 Massachusetts residents were affected. The report records the breach type as electronic.

PrimeLending, a PlainsCapital Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-08-23. 2 Indiana residents were affected. 230 individuals affected in total.

PlainsCapital Bank notified customers that a third-party vendor using MOVEit file transfer software was impacted by a global zero-day cyberattack between May 27 and May 31, 2023. The bank discovered the exposure on June 27, 2023. Customer data, including names, addresses, and potentially Social Security numbers and financial account information, was likely obtained by an unauthorized party. The bank is offering 12 months of credit monitoring and identity restoration services.

PlainsCapital Bank notified customers of a data breach stemming from a third-party vendor's exposure to the MOVEit zero-day cyberattack. The incident, discovered on June 27, 2023, likely impacted customer personal information. The Bank investigated, engaged the vendor to apply security patches, and offered 12 months of complimentary credit monitoring and identity restoration services to affected individuals.

PlainsCapital Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-14. 84 Massachusetts residents were affected. The report records the breach type as electronic.

Hilltop Holdings Inc. disclosed that its subsidiary, PlainsCapital Bank, was affected by a security incident involving a third-party vendor. The vendor experienced a breach targeting a zero-day vulnerability in the MOVEit Transfer Application, resulting in the likely exfiltration of customer data, including social security numbers and account numbers. The company launched an investigation and plans to offer credit monitoring to affected customers.