← All stories
● Covered by 1 source · 1 reportMedium impact1 neutral

Abrigo's Sageworks platform taken offline after suspected cyberattack, partially restored

🔄 Updated 4d ago
New to BrevFeed? We gather this story from every outlet covering it into one summary — ranked by real-world impact, not just the latest headline — so you never miss what matters. What is BrevFeed? →

Key points

  • Sageworks application taken offline October 30 due to "irregular activity".
  • Most functionality restored, borrower-facing features remain offline.
  • Incident impacted Online Portal Now, Sageworks Analyst, and Sageworks API.
  • Earlier 2023 claim by ShinyHunters alleged data theft from Abrigo.

Sageworks Application Offline

Abrigo, a financial technology company, initiated emergency maintenance and took its Sageworks risk management application offline on October 30. This action followed the detection of "irregular activity" within its operational environment. The outage extended through the weekend, affecting services like Online Portal Now, Sageworks Analyst, and Sageworks API.

Partial Restoration Achieved

As of the latest update, Abrigo has restored most of the Sageworks platform's functionality. However, borrower-facing features remain unavailable. The company has not yet disclosed specific details regarding the nature of the incident, and investigations are ongoing to determine if it was a breach or a technical issue.

Context and Previous Allegations

Sageworks is a software platform used by over 2,400 community banks and credit unions for loan processing, financial analysis, and credit assessment, handling sensitive customer information. Earlier in 2023, an individual claiming to be part of the ShinyHunters extortion group alleged an attack on Abrigo, stating they stole 1.7 million Salesforce records containing personally identifiable information and corporate data. This previous claim has not been confirmed as a data breach by Abrigo.

Industry Recommendations

Given the sensitive nature of the data handled by Sageworks and the unconfirmed but alleged prior breach, some cybersecurity researchers have advised banks and credit unions utilizing Abrigo's solutions to rotate their API keys for the Sageworks platform as a precautionary measure.

✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →

The daily brief

One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.

One email a day. Unsubscribe in one click, any time.

Today's brief

Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.

~4 min · 3 stories · Nov 07

▶ Play today's brief Listen on Spotify

New every morning, and the back catalogue is archived by date.

Reporting from

Abrigo took its Sageworks risk management application offline on October 30 due to "irregular activity" in its environment, with most functionality now restored except for borrower-facing features. The incident's nature is under investigation, but a previous claim by ShinyHunters in 2023 alleged a data theft from Abrigo.