<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Third-Party Vendor Breach Costs Texas Credit Union

author Michael Berman
1 min read
Nov 14, 2017

A Texas credit union has found itself dealing with the expensive consequences of a third-party vendor breach, it announced to members last week.

The third-party vendor the credit union was using for data analytic services was a victim of a ransomware attack that resulted in thousands of member files being compromised, including Social Security numbers. As a result, the credit union had to notify thousands of members of this data breach and explain the issue with their vendor management program. In addition, the credit union is providing each member identification repair and monitoring services, which is costing them hundreds of thousands of dollars.

While the credit union is now reviewing its third-party risk management practices, agreements, and monitoring capabilities, the damage is already done. It can only hope to put in place a better vendor management system to avoid future problems.

Don’t Let Heartbleed Lead to Vendor Management Heartbreak

This was an avoidable problem. Unfortunately, too many credit unions assume that there are no issues with vendor management because they passed their last exam. Unfortunately, the lack of exam findings does not protect credit unions from their third-party vendors.

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Regulatory Compliance Management Nrisk News & Updates HMDA Risk Mortgage Lenders Vendor Management Ncomply Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Business Continuity Third-Party Vendor Management Cybersecurity Fintech NVendor Strategic Planning Ncyber Regulatory Updates Ntransmittal Audits & Findings OCC Regulatory Compliance Company Culture Audit Nverify Compliance Management Exams FDIC Nfindings Findings NCUA Contract Management Employee Intranet Business Continuity Management Contract FRB Findings Management Enterprise Risk Management FFIEC Ncontracts manager Third-Party Vendors Vendor Risk Vendor Risk Management Wealth Management 1071 ABA Bank Access Control Artificial Intelligence Audit Findings Board Portal Call Report Compliance Risk Cybersecurity Assessment Digital Tansformation Due Diligence Efficiency Employee Engagement Exam findings FIEC Governance and Risk Management Inc. 5000 Internal Audit Management Mortgage Lending Nboardportal Verify integrated risk management
Documentation is Key: Takeaways from the OCC’s Third-Party Vendor Risk Management Procedures
Vendor Management

Documentation is Key: Takeaways from the OCC’s Third-Party Vendor Risk Management Procedures

Feb 9, 2017 3 min read
OCC: Marketplace Lenders Are Third-Party Vendors
Vendor Management

OCC: Marketplace Lenders Are Third-Party Vendors

Mar 8, 2017 2 min read
Are Your Third-Party Vendors Protecting the Rights of Servicemembers?
Vendor Management

Are Your Third-Party Vendors Protecting the Rights of Servicemembers?

Sep 2, 2016 1 min read