Umpqua Bank

Umpqua Bank, a subsidiary of Columbia Banking System, disclosed a third-party vendor incident involving MOVEit file-sharing software. The vendor reported unauthorized access to consumer and small business customer names and SSNs/TINs. Umpqua notified affected customers via email on June 22, 2023, and engaged forensic investigators. No commercial customer data was compromised.

Umpqua Bank notified California residents that their names and Social Security numbers were accessed due to a third-party vendor's exposure in the global MOVEit Transfer cybersecurity incident. The vendor uses Progress Software's MOVEit Transfer tool, which had a previously unknown vulnerability reported on May 31, 2023. The breach date is listed as May 27, 2023. Umpqua was notified by the vendor on June 21, 2023. No banking information was involved. The bank is offering 24 months of identity monitoring.

Umpqua Bank reported a data breach affecting 84 Maine residents, which occurred between May 27 and May 31, 2023. The breach was discovered on June 21, 2023, and was caused by an external system breach (hacking) of a third-party vendor, Fidelity National Information Services, Inc. The compromised information included names and Social Security numbers. Umpqua Bank began notifying affected individuals on August 11, 2023, and offered 24 months of identity monitoring and theft protection services through OnAlert Essential Bundle from ChexSystems.

Affected (this filing): 84