Financial Institution Service Corporation

Financial Institution Service Corporation (FISC) disclosed a data breach resulting from the exploitation of zero-day vulnerabilities in the MOVEit Transfer tool provided by Progress Software Corp. An unknown actor accessed the server between May 30 and May 31, 2023, and exfiltrated data including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and financial account information. FISC applied patches, engaged third-party cybersecurity specialists, reported the incident to federal law enforcement, and offered 12 months of identity monitoring via Kroll.

Financial Institution Service Corporation (FISC) reported a data breach affecting 237,678 individuals due to the MOVEit Transfer third-party vulnerability. The breach occurred on May 30, 2023, and was discovered on May 31, 2023. Exposed data includes names and financial account numbers with their associated access codes. FISC began notifying affected individuals on October 4, 2023, and offered 12 months of credit monitoring and identity restoration services through Kroll.

Affected (this filing): 237,678