1st Source notified AGs on cybersecurity event estimated to impact 450K records

In a regulatory filing, 1st Source stated: “Per its Form 8-K filed July 10, 1st Source Corporation disclosed that, as part of the cybersecurity event concerning a software application known as MOVEit impacting numerous organizations and governmental agencies around the world, an unauthorized third-party gained access to sensitive data of commercial and individual clients, including personally identifiable information of individuals. The company summarized the steps it had taken to eliminate the software vulnerability and steps it was taking to notify and offer clients impacted complimentary monitoring, identity restoration, and fraud detection services. The company has since notified states attorney generals or other designated state officials as required under state data security notification laws of the incident, including the total estimated number of records impacted of 450,000 which includes the number of impacted residents in all applicable states.”