In an alarming development for corporate data security, Community Trust Bank, Inc. recently confirmed that a vendor data breach occurred linked to the MOVEit file-transfer application. The notice of the data security incident was provided on September 8, 2023 to the Attorney General of Maine.
The breach came to light when one of the bank’s vendors discovered a breach of their data systems. The compromised data relates to the vendor’s use of MOVEit, a popular file-transfer application. As discussed here, the incident resulted in an unauthorized party gaining access to consumers’ sensitive information.
As soon as CTBI realised the breach, the issue was taken up with the relevant authorities, highlighting the importance of effective and swift communication in mitigating the damage in such situations. The specific details about the number of consumers affected or the type of information exposed are currently not disclosed, leading to a concerning level of uncertainty for the bank’s customers.
The role of vendors and third parties in corporate data security underlines the importance of vendor management. Legal professionals specializing in data security and privacy issues are keenly watching this case. It serves as a pertinent reminder of the risks inherent in sharing sensitive customer information with vendors and the need for robust data protection mechanisms.