Scores of US credit unions offline after ransomware infects backend cloud outfit

L4sBot@lemmy.worldmod to Technology@lemmy.world – 176 points –
60 US credit unions offline after cloud ransomware infection
theregister.com

Scores of US credit unions offline after ransomware infects backend cloud outfit::Supply chain attacks: The gift that keeps on giving

23

I wouldn't notice the difference with my credit union. They're app/website barely works when they aren't being attacked.

That/lack of Mint.com integration (RIP) is what's kept me from switching away from my "giant monster mega bank" all these years.

Good news! They're killing Mint.com so your problem will be solved for you shortly.

https://www.nytimes.com/2023/11/03/business/mint-app-closing-intuit.html

“Mint has always been a money loser,” Mr. Agostino, a former product manager at Mint, said in an interview. “Given the revenue Credit Karma was generating, it makes sense to go that path.”

Translation: "Eh, all it does is help people without bringing us significant revenue. Let's try to push the users over to a more spammy based app!"

I remember when both came out, and used them extensively. Finally dropped CK, then Mint, as they both started including more and more loan ads. We certainly had a good run of actually useful free stuff, but that's finally catching up.

The enshittification will continue until morale improves. Fall in line, USER.

Like I want to give yet another 3rd party access to my data anyway.

Goodbye mint.

Time for me to plug my preferred budgeting application, budget with buckets. Envelope budgeting like ynab, however it's offline. You can import statements from your bank, use macros to access the bank, or pay 15 bucks a year for syncing through simplefinbridge.

Permanent license is a one time payment of $50, and there's an unlimited free trial.

I know, hence the "(RIP)". Still, I'm not going to give up on having integrated financial info so any credit union I switch to would have to support whatever I replace Mint with (even if it's as rudimentary as letting me automate downloading an OFX file).

That's one of the side effects of all the bank acquisitions and mergers and consolidations. National banks have so much more money to invest in things like Mint/plaid integrations, live fraud monitoring (vs daily fraud monitoring), etc.

Hell, I can't even get free checks from my credit union anymore.

And it doesn't help that banks have lobbied to keep credit unions from merging outside of their immediate service areas.

Nothing would keep me from leaving Gint Monster Mega Bank.

Moving back to a CU was the best decision... Saved me $500/year in fees, seen no negatives so far.

My credit union does not charge overdraft fees and they even called us once to remind us we forgot to make a loan payment. Bank of America would have just raked us over the coals.

Moving back to a CU was the best decision... Saved me $500/year in fees, seen no negatives so far.

1 more...
1 more...

Not a credit union, but the PNC app barely works either. Sometimes it takes me 4 attempts to successfully log on because the app crashes during sign-on.

1 more...

Uggh, kills me to see any company paying so little attention to security to let this happen.

This is the best summary I could come up with:


"I can confirm that approximately 60 credit unions are currently experiencing some level of outage due to a ransomware attack at a third-party service provider," the NCUA spokesperson said.

We're told the unions' IT provider Ongoing Operations – ironic – was hit by ransomware on Sunday, sparking days of disruption for the biz's clients.

Ongoing Operations, which is owned by Trellance and provides things from disaster recovery solutions to remote virtual desktops and hosted applications, told its customers:

On Thursday, northern New York's Mountain Valley Federal Credit Union appeared to be one of the many orgs suffering "system downtime" as a result of a ransomware infection at Ongoing Operations.

"It has been brought to our attention by our data processor – FedComp Inc, that the third-party vendor of our computer operating system 'Trellance' was the victim of a ransomware attack," boss Maggie Pope said [PDF] in a letter to her credit union members.

Trellance and FedComp have been working around the clock to get our systems along with other credit unions around the country that have experienced the same issue back online."


The original article contains 483 words, the summary contains 182 words. Saved 62%. I'm a bot and I'm open source!

Interesting. There was a social media campaign going around to exit bank recently. I don’t know and won’t assert connection, but it makes me curious.