Supply chain ⛓ Supply Chain

City of Monroe, Kirkland, Redmond Third-Party Breach (February 2021)

📅 2021-02-01 🏢 Automatic Funds Transfer Services
Primary Source ↗

Incident Details

City of Monroe’s utility billing vendor hit with data breach - HeraldNet.com. A third of the city’s residential and commercial customers might have had have banking information exposed. MONROE — The city of Monroe’s utility billing vendor was electronically breached last week, possibly exposing some customers’ banking information and more, the city announced Monday. Between Wednesday and Thursday, hackers used ransomware to encrypt servers hosted by Seattle-based Automatic Funds Transfer Services, which processes paper checks for the city’s residential and commercial utility billing. Now, bank account numbers, routing information, names, addresses, billing amounts and utility account numbers of customers who pay by check could be exposed, the city said in a news release. Third-party company: Automatic Funds Transfer Services.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Automatic Funds Transfer Services
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2021-02-01 Breach occurred
  2. 2021-02-08 Publicly disclosed