PlainsCapital Bank

Hilltop Holdings Inc. disclosed that PlainsCapital Bank, a wholly owned subsidiary, was impacted by a third-party vendor incident involving a zero-day vulnerability in the MOVEit Transfer Application. The vendor confirmed that customer data, including SSNs and account numbers, was likely obtained. The company launched an investigation and plans to offer credit monitoring and identity restoration services to affected customers.

PlainsCapital Bank notified customers that a third-party vendor using MOVEit file transfer software was impacted by a global zero-day cyberattack between May 27 and May 31, 2023. The bank discovered the exposure on June 27, 2023. Customer data, including names, addresses, and potentially Social Security numbers and financial account information, was likely obtained by an unauthorized party. The bank is offering 12 months of credit monitoring and identity restoration services.

PlainsCapital Bank reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-14. The breach occurred from 5/27/2023 to 5/31/2023. 48 Montana residents were affected.

Affected (this filing): 48