Abrigo, a software provider to U.S. community banks and credit unions, took its Sageworks lending platform offline Friday after it "identified irregular activity" in its environment, and borrower-facing features were still unavailable Monday, BleepingComputer reported Monday. Abrigo has not said whether the incident was a cyberattack or whether any data was taken, leaving the lenders that rely on the platform without a clear picture of their exposure.
What Happened
Abrigo began emergency maintenance Oct. 30 and disabled Sageworks to investigate suspicious activity it had detected earlier that day, according to BleepingComputer. The outage hit Online Portal Now, Sageworks Analyst and the Sageworks application programming interface (API), which connects the platform to other software, and it lasted through the weekend.
In status updates, Abrigo said its investigation was ongoing without describing the incident. By Nov. 2, it said most functions had been restored except features used by borrowers.
Sageworks helps lenders take in loan applications, analyze borrowers' finances, judge creditworthiness and monitor loan portfolios, so it handles sensitive customer financial information. Abrigo says it serves more than 2,400 community banks, credit unions and other organizations in the U.S.; BleepingComputer did not report how many of them use Sageworks.
BleepingComputer said it is unclear whether the outage stems from a breach or a technical problem, and no data theft has been confirmed. Abrigo had not responded to the outlet's request for comment.
Why It Matters
Small lenders often share the same specialist software vendors, so trouble at one provider can stall loan work at many institutions at once. An outage like this one interrupts daily operations, and if unauthorized access is confirmed, the borrower financial data the platform holds would make it a breach-notification question for each affected lender.
Executives and boards at institutions using Sageworks should ask Abrigo for a written incident report covering what happened, whether customer data was reached and which connections to their own systems were exposed. Some security researchers advised banks and credit unions using the platform to rotate their Sageworks API keys, BleepingComputer reported.
What to Watch
Watch whether Abrigo confirms unauthorized access or data theft, whether breach notices follow and when borrower-facing features come back online.
