“Finastra, which provides software and services to 45 of the world’s top 50 banks, notified customers of the security incident after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company.”
Finastra processes wire and bank transfer files for about 8,100 financial institutions. The seller first listed the data on October 31 at $20,000 and cut the price to $10,000 by November 3. Finastra says it detected suspicious activity on November 7, and the early evidence points to compromised credentials. The banks’ data went on clearance before their vendor noticed it was gone.