Abrigo, a financial technology company, initiated emergency maintenance and took its Sageworks risk management application offline on October 30. This action followed the detection of "irregular activity" within its operational environment. The outage extended through the weekend, affecting services like Online Portal Now, Sageworks Analyst, and Sageworks API.
As of the latest update, Abrigo has restored most of the Sageworks platform's functionality. However, borrower-facing features remain unavailable. The company has not yet disclosed specific details regarding the nature of the incident, and investigations are ongoing to determine if it was a breach or a technical issue.
Sageworks is a software platform used by over 2,400 community banks and credit unions for loan processing, financial analysis, and credit assessment, handling sensitive customer information. Earlier in 2023, an individual claiming to be part of the ShinyHunters extortion group alleged an attack on Abrigo, stating they stole 1.7 million Salesforce records containing personally identifiable information and corporate data. This previous claim has not been confirmed as a data breach by Abrigo.
Given the sensitive nature of the data handled by Sageworks and the unconfirmed but alleged prior breach, some cybersecurity researchers have advised banks and credit unions utilizing Abrigo's solutions to rotate their API keys for the Sageworks platform as a precautionary measure.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
Abrigo took its Sageworks risk management application offline on October 30 due to "irregular activity" in its environment, with most functionality now restored except for borrower-facing features. The incident's nature is under investigation, but a previous claim by ShinyHunters in 2023 alleged a data theft from Abrigo.