Union Bank and Trust Company Falls Victim to Data Breach Affecting Over 200,000 Customers

• Union Bank and Trust Company in Lincoln, Nebraska, experienced a data breach on May 29, 2023, affecting 204,291 individuals, compromising names, addresses, email addresses, phone numbers, and social security numbers.
• The bank is offering 12 months of free credit monitoring through Kroll, advising customers on placing fraud alerts and security freezes, and has reported the incident to federal law enforcement and credit reporting agencies.

Union Bank and Trust Company (UBT) recently disclosed a significant data breach that has affected 204,291 individuals. The breach occurred on May 29, 2023, and was discovered on June 9, 2023. The bank’s Chief Information Security Officer, Dana L. Turner, revealed that hackers exploited a zero-day vulnerability within the MOVEit Transfer software provided by Progress Software. The breach only affected the MOVEit Transfer application, and no other systems within UBT were compromised.

The compromised data includes names, addresses, email addresses, phone numbers, and social security numbers. The bank confirmed that this information could have been accessed without authorization due to the vulnerability.

Upon discovery, UBT immediately took the compromised application offline and launched an investigation with the help of third-party forensic specialists. The bank also notified federal law enforcement agencies, which are currently investigating the incident. According to Turner, UBT is taking measures to strengthen its security systems in response to the breach.

Union Bank and Trust Company is offering 12 months of free credit monitoring services through Kroll to individuals whose personal information might have been compromised. In addition, the bank is providing guidance on protecting against identity theft and fraud. It is advising affected customers to remain vigilant by reviewing account statements and monitoring credit reports.

Moreover, UBT is also guiding individuals on placing fraud alerts and security freezes on their credit files and has provided contact information for national consumer reporting agencies. The bank encourages those affected to report any incidents of identity theft or fraud to the Federal Trade Commission, their state Attorney General, or law enforcement.

Union Bank and Trust Company has taken responsibility to notify the relevant state and federal regulators and the three major credit reporting agencies – Equifax, Experian, and TransUnion.

This incident underscores the importance of robust cybersecurity measures and prompt action in the face of data breaches, especially for financial institutions that handle sensitive customer information.

For more information, affected customers can contact Dana L. Turner via telephone at 402-323-1808 or email at dana.turner@ubt.com.

Source: Union Bank and Trust Company, 3643 S. 48th St, P.O. Box 82535, Lincoln, Nebraska, 68501-2535.