'Cybersecurity issue' takes MoneyGram offline for three days – and counting
(2024/09/23)
- Reference: 1727127170
- News link: https://www.theregister.co.uk/2024/09/23/moneygram_cybersecurity_issue/
- Source link:
A "cybersecurity issue" has shut down MoneyGram's systems and payment services since Friday, and the fintech leader has yet to update customers as to when it expects to have its global money transfer services back up and running.
The downed services reportedly include [1]in-person payments as well as online transactions.
The Register has asked Texas-based MoneyGram for comment and will update this story if and when we receive answers to our questions, including when it expects to restore its operations, and if a ransomware infection is to blame for the forced downtime.
[2]
After initially alerting customers via X/Twitter on Saturday, and [3]describing the problem as a "network outage impacting connectivity to a number of our systems," the financial technology firm disclosed on Monday that the outage was due to some sort of digital intrusion.
[4]
[5]
However, MoneyGram still has not used the dreaded "r" word in describing the system outage, and it does not yet appear that any ransomware gang has claimed responsibility for the breach.
In the Monday Xeet, MoneyGram [6]said it had "identified a cybersecurity issue affecting certain of our systems." Following that detection, the payment processor says it "immediately launched an investigation and took protective steps to address it, including proactively taking systems offline which impacted network connectivity."
[7]Cybercrooks strut away with haute couture Harvey Nichols data
[8]Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims
[9]Rhysida ransomware gang ships off Port of Seattle data for $6M
[10]Despite Russia warnings, Western critical infrastructure remains unprepared
It has since hired third-party cybersecurity experts and is working with law enforcement, we're told. "We are working diligently to bring our systems back online and resume normal business operations," MoneyGram promised.
The money transfer giant has access to — and, we'd assume, stores — a ton of sensitive customer data. This presumably includes usernames and passwords, bank account and credit card numbers, names, addresses, phone numbers, and other contact information that can also be used, in the wrong hands, for financial and identity theft along with other fraud.
[11]
This makes MoneyGram a prime target for digital thieves looking for a payout, either in the form of an extortion payment or by selling people's private information on dark-web marketplaces.
In 2023, private equity firm Madison Dearborn Partners completed the acquisition of MoneyGram for about $1.8 billion. The fintech business claims to have more than 150 million customers worldwide. ®
Get our [12]Tech Resources
[1] https://x.com/NLRElectric/status/1838215863016497352
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://x.com/MoneyGram/status/1837617568447647840
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://x.com/MoneyGram/status/1838203169765052552
[7] https://www.theregister.com/2024/09/20/highstreet_swank_dealer_harvey_nichols/
[8] https://www.theregister.com/2024/09/19/valencia_ransomware_california_city/
[9] https://www.theregister.com/2024/09/17/rhysida_port_of_seattle/
[10] https://www.theregister.com/2024/09/18/russia_west_critical_infrastructure/
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://whitepapers.theregister.com/
The downed services reportedly include [1]in-person payments as well as online transactions.
The Register has asked Texas-based MoneyGram for comment and will update this story if and when we receive answers to our questions, including when it expects to restore its operations, and if a ransomware infection is to blame for the forced downtime.
[2]
After initially alerting customers via X/Twitter on Saturday, and [3]describing the problem as a "network outage impacting connectivity to a number of our systems," the financial technology firm disclosed on Monday that the outage was due to some sort of digital intrusion.
[4]
[5]
However, MoneyGram still has not used the dreaded "r" word in describing the system outage, and it does not yet appear that any ransomware gang has claimed responsibility for the breach.
In the Monday Xeet, MoneyGram [6]said it had "identified a cybersecurity issue affecting certain of our systems." Following that detection, the payment processor says it "immediately launched an investigation and took protective steps to address it, including proactively taking systems offline which impacted network connectivity."
[7]Cybercrooks strut away with haute couture Harvey Nichols data
[8]Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims
[9]Rhysida ransomware gang ships off Port of Seattle data for $6M
[10]Despite Russia warnings, Western critical infrastructure remains unprepared
It has since hired third-party cybersecurity experts and is working with law enforcement, we're told. "We are working diligently to bring our systems back online and resume normal business operations," MoneyGram promised.
The money transfer giant has access to — and, we'd assume, stores — a ton of sensitive customer data. This presumably includes usernames and passwords, bank account and credit card numbers, names, addresses, phone numbers, and other contact information that can also be used, in the wrong hands, for financial and identity theft along with other fraud.
[11]
This makes MoneyGram a prime target for digital thieves looking for a payout, either in the form of an extortion payment or by selling people's private information on dark-web marketplaces.
In 2023, private equity firm Madison Dearborn Partners completed the acquisition of MoneyGram for about $1.8 billion. The fintech business claims to have more than 150 million customers worldwide. ®
Get our [12]Tech Resources
[1] https://x.com/NLRElectric/status/1838215863016497352
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://x.com/MoneyGram/status/1837617568447647840
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://x.com/MoneyGram/status/1838203169765052552
[7] https://www.theregister.com/2024/09/20/highstreet_swank_dealer_harvey_nichols/
[8] https://www.theregister.com/2024/09/19/valencia_ransomware_california_city/
[9] https://www.theregister.com/2024/09/17/rhysida_port_of_seattle/
[10] https://www.theregister.com/2024/09/18/russia_west_critical_infrastructure/
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZvHlA0mPa-mykRPC3VXKqQAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://whitepapers.theregister.com/