<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Third-Party Vendor Breach Costs Texas Credit Union

author Michael Berman
1 min read
Nov 14, 2017

A Texas credit union has found itself dealing with the expensive consequences of a third-party vendor breach, it announced to members last week.

The third-party vendor the credit union was using for data analytic services was a victim of a ransomware attack that resulted in thousands of member files being compromised, including Social Security numbers. As a result, the credit union had to notify thousands of members of this data breach and explain the issue with their vendor management program. In addition, the credit union is providing each member identification repair and monitoring services, which is costing them hundreds of thousands of dollars.

While the credit union is now reviewing its third-party risk management practices, agreements, and monitoring capabilities, the damage is already done. It can only hope to put in place a better vendor management system to avoid future problems.

Don’t Let Heartbleed Lead to Vendor Management Heartbreak

This was an avoidable problem. Unfortunately, too many credit unions assume that there are no issues with vendor management because they passed their last exam. Unfortunately, the lack of exam findings does not protect credit unions from their third-party vendors.

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Vendor Risk Enterprise Risk Management ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
Documentation is Key: Takeaways from the OCC’s Third-Party Vendor Risk Management Procedures
Vendor Management

Documentation is Key: Takeaways from the OCC’s Third-Party Vendor Risk Management Procedures

Feb 9, 2017 3 min read
When Third-Party Vendors Mean Quadruple the Risk
Vendor Management

When Third-Party Vendors Mean Quadruple the Risk

Jun 10, 2016 3 min read
Are Your Third-Party Vendors Protecting the Rights of Servicemembers?
Vendor Management

Are Your Third-Party Vendors Protecting the Rights of Servicemembers?

Sep 2, 2016 1 min read