DUBLIN, Calif.–The online banking system at Patelco Credit Union remains down, affecting more than 500,000 members, with the credit union now confirming it has been hit by a ransomware attack.
As CUToday.info reported here, the $9.7-billion Patelco informed members over the weekend of a “serious security incident” that had resulted in an outage of electronic transactions, such as transfers (including Zelle), direct deposit, balance inquiries, and payments.
The incident has received considerable media coverage in the Bay Area with members sharing frustrations over inability to get to funds or to know their balances.
Patelco has now confirmed it has shut down its system as it works with a cybersecurity team to recover access to its data.
There has been no statement issued on whether a ransom has been demanded by the hackers.
Page Offers Updates
On a web page set up to update members on the incident, Patelco CU confirmed it was hit by a ransomware attack on June 29.
“Unfortunately, this incident has required us to proactively shut down some of our day-to-day banking systems in order to contain and remediate the issue,” its statement says. “Importantly, members can still access cash from ATMs. We have engaged a leading third-party cybersecurity forensic firm to help us to investigate and recover as soon as possible. Please know that our team and third-party partners are working around the clock to get back up and running. We are committed to providing transparent and frequent updates to best of our ability as well as the best possible service that we can, given the disruption.
‘Sincerely Apologize’
“We sincerely apologize for the inconvenience that this cyber attack has caused for our members,” the statement continues. “We anticipate longer than normal wait times and truly appreciate your patience and support during this difficult time.”
The web page includes an update on what is operating and what is not, as shown below.
While branches are open, members have told local media employees are unable to access any account information and withdrawals are limited to $500.