Bank’s $2.4M Apology: A Tale of Ransomware, Regret, and Ridiculous Settlements

The tale unfolds like a tragic farce. In May 2023, the “CL0P Ransomware Gang,” those shadowy virtuosos of the digital underworld, struck with precision. They exploited a vulnerability in the bank’s third-party MOVEit file-transfer software, a tool crafted by the ever-vigilant Progress Software Inc. Ah, progress! What a double-edged sword it is! Progress had, in fact, warned UBT of an “unauthenticated SQL vulnerability,” a gaping wound in their digital armor. But alas, the warning came too late, or perhaps the bank’s ears were stopped with the wax of complacency.