cyber
confidence high
sentiment negative
materiality 0.85
Hilltop Holdings data breach at vendor exposes SSNs, account numbers of substantially all bank customers
Hilltop Holdings Inc.
- Third-party vendor of PlainsCapital Bank confirmed June 27 that SSNs and account numbers for substantially all customers were likely taken via MOVEit zero-day vulnerability.
- No indication of impact on Hilltop's own systems or customer access credentials; no material business interruption.
- Bank will offer complimentary credit monitoring and identity restoration services to affected customers.
- Company expects to incur expenses for response, remediation, and investigation; faces potential litigation and regulatory scrutiny.