Cybersecurity incident — 2023-02-28 00:00:00
Affected organization: Hatch Bank
Affected country: United States of America
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Hatch Bank, a digital-first bank that provides infrastructure for fintech companies offering their own brand credit cards, confirms that attackers exploited the Fortra's GoAnywhere CVE-2023-0669 zero-day vulnerability in the company's internal file transfer software that allowed access to thousands of customer Social Security numbers.