Umpqua Bank

Umpqua Bank, via vendor FIS, notified New Hampshire AG of a MOVEit Transfer zero-day exploit (T1190) affecting 50 state residents. Personal info (SSN, name) was accessed. FIS patched the system and notified law enforcement. Umpqua offered 24 months of credit monitoring.

Umpqua Bank reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-08-11. 143 Indiana residents were affected. 429,252 individuals affected in total.

Umpqua Bank notified California residents that their names and Social Security numbers were accessed due to a third-party vendor's exposure in the global MOVEit Transfer cybersecurity incident. The vendor uses Progress Software's MOVEit Transfer tool, which had a previously unknown vulnerability reported on May 31, 2023. The breach date is listed as May 27, 2023. Umpqua was notified by the vendor on June 21, 2023. No banking information was involved. The bank is offering 24 months of identity monitoring.

Umpqua Bank reported a data breach affecting 84 Maine residents, which occurred between May 27 and May 31, 2023. The breach was discovered on June 21, 2023, and was caused by an external system breach (hacking) of a third-party vendor, Fidelity National Information Services, Inc. The compromised information included names and Social Security numbers. Umpqua Bank began notifying affected individuals on August 11, 2023, and offered 24 months of identity monitoring and theft protection services through OnAlert Essential Bundle from ChexSystems.

Umpqua Bank, a client of FIS, experienced a data breach via a zero-day vulnerability in Progress Software's MOVEit Transfer tool. The incident exposed names and SSNs of 145,274 Washington residents. FIS disabled the tool, patched systems, and engaged forensic experts. Umpqua notified affected individuals and offered 24 months of credit monitoring.

Columbia Banking System, Inc. disclosed that its subsidiary, Umpqua Bank, was affected by a security incident involving a third-party technology service provider's MOVEit filesharing software. The incident resulted in the unauthorized acquisition of names and Social Security numbers or tax identification numbers of certain consumer and small business customers. Umpqua Bank notified affected customers via email on June 22, 2023. A separate on-premise MOVEit incident was also contained with no data loss. The Company does not currently believe the incidents will have a material adverse effect.