60 US credit unions offline after cloud ransomware infection
www.theregister.com
Supply chain attacks: The gift that keeps on giving

Scores of US credit unions offline after ransomware infects backend cloud outfit::Supply chain attacks: The gift that keeps on giving

  • roofuskit@lemmy.worldEnglish
    38·
    11 months ago

    I wouldn’t notice the difference with my credit union. They’re app/website barely works when they aren’t being attacked.

    • grue@lemmy.worldEnglish
      6·
      11 months ago

      That/lack of Mint.com integration (RIP) is what’s kept me from switching away from my “giant monster mega bank” all these years.

        • brvslvrnst@lemmy.mlEnglish
          14·
          11 months ago

          “Mint has always been a money loser,” Mr. Agostino, a former product manager at Mint, said in an interview. “Given the revenue Credit Karma was generating, it makes sense to go that path.”

          Translation: “Eh, all it does is help people without bringing us significant revenue. Let’s try to push the users over to a more spammy based app!”

          I remember when both came out, and used them extensively. Finally dropped CK, then Mint, as they both started including more and more loan ads. We certainly had a good run of actually useful free stuff, but that’s finally catching up.

        • BearOfaTime@lemm.eeEnglish
          5·
          11 months ago

          Like I want to give yet another 3rd party access to my data anyway.

          Goodbye mint.

          • papertowels@lemmy.oneEnglish
            2·
            11 months ago

            Time for me to plug my preferred budgeting application, budget with buckets. Envelope budgeting like ynab, however it’s offline. You can import statements from your bank, use macros to access the bank, or pay 15 bucks a year for syncing through simplefinbridge.

            Permanent license is a one time payment of $50, and there’s an unlimited free trial.

        • grue@lemmy.worldEnglish
          2·
          11 months ago

          I know, hence the “(RIP)”. Still, I’m not going to give up on having integrated financial info so any credit union I switch to would have to support whatever I replace Mint with (even if it’s as rudimentary as letting me automate downloading an OFX file).

      • CosmicTurtle@lemmy.worldEnglish
        6·
        11 months ago

        That’s one of the side effects of all the bank acquisitions and mergers and consolidations. National banks have so much more money to invest in things like Mint/plaid integrations, live fraud monitoring (vs daily fraud monitoring), etc.

        Hell, I can’t even get free checks from my credit union anymore.

        And it doesn’t help that banks have lobbied to keep credit unions from merging outside of their immediate service areas.

        • BearOfaTime@lemm.eeEnglish
          4·
          11 months ago

          Moving back to a CU was the best decision… Saved me $500/year in fees, seen no negatives so far.

          • nocturne213@lemm.eeEnglish
            5·
            11 months ago

            My credit union does not charge overdraft fees and they even called us once to remind us we forgot to make a loan payment. Bank of America would have just raked us over the coals.

        • BearOfaTime@lemm.eeEnglish
          1·
          11 months ago

          Moving back to a CU was the best decision… Saved me $500/year in fees, seen no negatives so far.

    • Uncle_Bagel@midwest.socialEnglish
      3·
      11 months ago

      Not a credit union, but the PNC app barely works either. Sometimes it takes me 4 attempts to successfully log on because the app crashes during sign-on.

  • BearOfaTime@lemm.eeEnglish
    10·
    11 months ago

    Uggh, kills me to see any company paying so little attention to security to let this happen.

  • AutoTL;DR@lemmings.worldBEnglish
    7·
    11 months ago

    This is the best summary I could come up with:

    “I can confirm that approximately 60 credit unions are currently experiencing some level of outage due to a ransomware attack at a third-party service provider,” the NCUA spokesperson said.

    We’re told the unions’ IT provider Ongoing Operations – ironic – was hit by ransomware on Sunday, sparking days of disruption for the biz’s clients.

    Ongoing Operations, which is owned by Trellance and provides things from disaster recovery solutions to remote virtual desktops and hosted applications, told its customers:

    On Thursday, northern New York’s Mountain Valley Federal Credit Union appeared to be one of the many orgs suffering “system downtime” as a result of a ransomware infection at Ongoing Operations.

    “It has been brought to our attention by our data processor – FedComp Inc, that the third-party vendor of our computer operating system ‘Trellance’ was the victim of a ransomware attack,” boss Maggie Pope said [PDF] in a letter to her credit union members.

    Trellance and FedComp have been working around the clock to get our systems along with other credit unions around the country that have experienced the same issue back online."

    The original article contains 483 words, the summary contains 182 words. Saved 62%. I’m a bot and I’m open source!

    • scops@reddthat.comEnglish
      4·
      11 months ago

      Why fuck yeah? Credit Unions aren’t banks. They are owned by the members who keep their money there. This isn’t, “Big bad corpo gets a black eye.” This is “People trying to have a bit more control over their money get fucked over once again.”

  • floppade [he/him]@lemm.eeEnglish
    2·
    11 months ago

    Interesting. There was a social media campaign going around to exit bank recently. I don’t know and won’t assert connection, but it makes me curious.