Virtual Cyber & Technology Risk Management Forum

Finastra Ransomware/Data Breach

• Friday, March 20, 2020 Finastra notified its customers of a security incident that is currently impacting its customers. o 4.5% of the core processor market - #5 global core banking provider • Services were down through the weekend, leaving most of Finastra’s North American customers unable to provide services to their clients • Brian Krebs: “their response so far is straight out of the playbook for dealing with ransomware attacks.” • ZDNet and threat intelligence firm Bad Packets: o Research has shown that Finastra's internet-facing security measures were lacking. o Finastra had been running vulnerable Pulse VPN servers and outdated Citrix servers recently.

© 2020 SBS CyberSecurity, LLC www.sbscyber.com

50