2y ago

Scores of US credit unions offline after ransomware infects backend cloud outfit

www.theregister.com

60 US credit unions offline after cloud ransomware infection

Scores of US credit unions offline after ransomware infects backend cloud outfit::Supply chain attacks: The gift that keeps on giving

23 comments

I wouldn't notice the difference with my credit union. They're app/website barely works when they aren't being attacked.
- Their*
  
  Swipe typing and not proof reading. I swear Gboard never uses the correct form.
- That/lack of Mint.com integration (RIP) is what's kept me from switching away from my "giant monster mega bank" all these years.
  
  Good news! They're killing Mint.com so your problem will be solved for you shortly.
  https://www.nytimes.com/2023/11/03/business/mint-app-closing-intuit.html
  
  That's one of the side effects of all the bank acquisitions and mergers and consolidations. National banks have so much more money to invest in things like Mint/plaid integrations, live fraud monitoring (vs daily fraud monitoring), etc.
  Hell, I can't even get free checks from my credit union anymore.
  And it doesn't help that banks have lobbied to keep credit unions from merging outside of their immediate service areas.
  
  Nothing would keep me from leaving Gint Monster Mega Bank.
- Not a credit union, but the PNC app barely works either. Sometimes it takes me 4 attempts to successfully log on because the app crashes during sign-on.
Uggh, kills me to see any company paying so little attention to security to let this happen.
This is the best summary I could come up with:
"I can confirm that approximately 60 credit unions are currently experiencing some level of outage due to a ransomware attack at a third-party service provider," the NCUA spokesperson said.
We're told the unions' IT provider Ongoing Operations – ironic – was hit by ransomware on Sunday, sparking days of disruption for the biz's clients.
Ongoing Operations, which is owned by Trellance and provides things from disaster recovery solutions to remote virtual desktops and hosted applications, told its customers:
On Thursday, northern New York's Mountain Valley Federal Credit Union appeared to be one of the many orgs suffering "system downtime" as a result of a ransomware infection at Ongoing Operations.
"It has been brought to our attention by our data processor – FedComp Inc, that the third-party vendor of our computer operating system 'Trellance' was the victim of a ransomware attack," boss Maggie Pope said [PDF] in a letter to her credit union members.
Trellance and FedComp have been working around the clock to get our systems along with other credit unions around the country that have experienced the same issue back online."
The original article contains 483 words, the summary contains 182 words. Saved 62%. I'm a bot and I'm open source!
Mine appears to be down. First Service CU
Interesting. There was a social media campaign going around to exit bank recently. I don’t know and won’t assert connection, but it makes me curious.
- Why fuck yeah? Credit Unions aren't banks. They are owned by the members who keep their money there. This isn't, "Big bad corpo gets a black eye." This is "People trying to have a bit more control over their money get fucked over once again."

23 comments