Patelco Credit Union 'Serious security incident'

[Northern_Light]

https://www.sacbee.com/news/local/article289648040.html

[usonian]

1. Computer security sure has gone to hell since I retired.

Must be coincidence.


This is why I keep two credit cards. Odd thing is that the second one is paid electronically by Patelco.

I might have to pay by check, if checks are clearing.

Just a mess.

[Wonder Why]

3. What's gone to hell is the management decision that employees need to be available 24x7

and they have to use their own phones and/or computers remotely for company business. Remote access security is a joke. I did computer and network security before retirement.

[usonian]

4. I had an idea.

Keep work computers on a network that's completely isolated from any BYOD's.
No home computing on the office network, but go trash yourself.

I was never in a position to try or implement this, except at a very small startup where people did whatever they wanted anyway.
I ended up witnessing in court when an employee installed spyware on the boss'es laptop.
He left the damn receipts for the software in his desk.

Judgement came down: "You two work it out".

Remote access? I retired before that became the rage. I only used it for a consulting job with a 40 mile commute, so I worked from home a lot.

[Wonder Why]

5. Amazing, isn't it. I think there are other managemant issues - and it all comes down to management:

Management rarely sells the concept of computer security to themselves. One company I looked into considered security patches to be the same as any other changes "If it isn't broke, don't fix it". My answer: "It is broke. You just haven't fallen through the hoe yet but you will".

They don't sell security to their employees as being a danger to the company as well as their jobs. Of course, it is difficult to sell concern for your company when your company treats you like dirt. It's difficult to be concerned about your job when at any moment, the CEO gets a big raise and they announce layoffs or move the jobs to China or India or even cut your benefits "to save money".

As to IT or security support, "They're overhead. We'll just outsource that to the company of the boss' friend. We won't know what's going on, will have nobody who really knows our systems and needs but we'll save money!"

[Northern_Light]

2. Still not allowing logins this morning

Haven't seen anything new on what exactly happen.

NBC Bay Area News report

Still not allowing logins this morning.

Saw this recently and maybe a good idea to have a backup bank: https://lifehacker.com/money/you-should-have-a-backup-bank

[usonian]

6. I wonder what's going to happen with automated payments (like to my second credit card), checks clearing, and so forth

If they are not posting anything, I suspect that they don't know or were advised not to say.

I chatted with (presumably) a real human at the credit card company, and if the autopayment fails (scheduled today, so I will check tomorrow) and the chat person suppressed any late fees or credit hit in case it fails. Crossing fingers.

[Northern_Light]

7. KRON is reporting it as a ransomware attack

Patelco Credit Union banking services disrupted by ransomware attack
https://www.kron4.com/news/bay-area/patelco-credit-union-serious-security-incident-leaves-customers-unable-to-bank-online/

[usonian]

8. Email from July 1

I have a few key updates for you today:

The security incident was confirmed today to be a ransomware attack and one of the top cybersecurity forensic firms continues to help us investigate and recover as soon as possible

Checks written on your Patelco account will be paid as usual (but expect a delay on it debiting your account)

Transactions initiated at other banks or credit unions (such as ACH transfer) will be processed as usual (but expect a delay on it debiting and/or crediting your account)

ACH debits initiated by a biller (such as your utility bill) will also be processed as usual

If you pay your mortgage/rent by a personal check from your Patelco checking account, this will be processed as usual (but expect a delay on it debiting your account)

In addition, we will be providing the following for our members:

If you incur a late fee because of this incident, rest assured we will reimburse you for those fees

If you have concerns about late payments impacting your credit score, we will write letters on your behalf

We will waive any Patelco overdraft, late payment or ATM fees until we are back up and running

Additional details on how to request this support will be available soon.

As a reminder:

Electronic transactions such as recurring transfers (including Zelle), direct deposit, and balance inquiries are unavailable

Debit and credit card transactions are functioning in a limited capacity

ACH transfers or bill payments established with your Patelco account will not be processed

For cash withdrawals and deposits, you can access Patelco ATMs, including over 30,000 shared branch ATMs in the U.S.

We have created a dedicated webpage for the latest, most pertinent information including service availability at patelco.org/SecurityUpdate.

Our contact center and branches are open as usual. However, the lines in the branches and the wait time at our contact center are longer than normal.

We sincerely apologize for the inconvenience that this cyber-attack has caused for our members. We truly appreciate your patience and support during this difficult time.

The next few days – and coming weeks – may present challenges for our members, as we continue to navigate around the limited functionality we are experiencing due to this incident.

Please know we have a talented, experienced team of experts working alongside our team to help us recover.

Scary part: experts are working alongside our team


Translation: There are no security experts in-house.

Wonder if this will fit in an ATM slot.

[Northern_Light]

10. What's next

Once this is resolved I wonder if they'll limit the amount of withdrawals to prevent a run.
I'm sure as hell thinking of taking my money out.

[Northern_Light]

9. Patelco page for updates on security issue

Patelco Security Incident Updates
https://www.patelco.org/securityupdate

[BlueWaveNeverEnd]

11. uh oh

[Northern_Light]

12. Patelco Credit Union faces lawsuit as it reels from ransomware attack

Patelco Credit Union faces lawsuit as it reels from ransomware attack
https://www.bizjournals.com/sanfrancisco/news/2024/07/03/ransomware-lawsuit-patelco-credit-union.html

[ailsagirl]

13. I heard. I've banked with Patelco for many years