On February 28, 2023, Hatch Bank filed notice of a data breach with the Maine Attorney General after being notified by Fortra, a cybersecurity firm, that files stored on Fortra’s system and containing confidential consumer information were subject to unauthorized access. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names and Social Security numbers. After confirming that consumer data was leaked, Hatch Bank began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you received a data breach notification from Hatch Bank of Fortra, it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, third-party data breaches are becoming increasingly common and are placing millions of Americans at risk of identity theft. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Hatch Bank / Fortra data breach, please see our recent piece on the topic here.

What We Know So Far About the Fortra Data Breach

The available information regarding the Fortra data breach comes from Hatch Bank’s filing with the Maine Attorney General. According to this source, on January 29, 2023, Fortra experienced a cyberattack after learning of a vulnerability in the company’s software. Shortly after, on February 3, 2023, Fortra notified Hatch Bank that files contained on Fortra’s GoAnywhere site were accessible to an unauthorized party between January 30, 2023 and January 31, 2023.

In response, Hatch Bank secured its own systems and launched an investigation into the incident to learn what information was compromised. The company’s investigation confirmed that certain files containing confidential consumer information were among those files that were accessible to the unauthorized party.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Hatch Bank began to review the affected files to determine what information was compromised and which consumers were impacted. Hatch Bank completed this process on February 7, 2023. While the breached information varies depending on the individual, it may include your name and Social Security number.

On February 28, 2023, Hatch Bank sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Hatch Bank and Fortra

Hatch Bank is a bank and fintech company based in San Marcos, California. The company operates a fintech platform called Powered by Hatch with API connectivity, offering rates that are competitive with major financial institutions. Hatch Bank employs more than 25 people and generates approximately $5 million in annual revenue.

Fortra is a cybersecurity company based in Eden Prairie, Minnesota. The company also provides cybersecurity consulting services. Fortra employs more than 3,000 people and generates approximately $800 million in annual revenue.