A major cybersecurity incident at a fintech firm may have leaked sensitive personal and financial information of over 100,000 Americans.

In a filing with the Office of the Maine Attorney General, Valsoft Corporation, which does business in the US as AllTrust Networks, says it learned of a data breach affecting 161,359 customers.

-->

The firm says an internal investigation revealed that the breach potentially exposed data overseen by its subsidiary, including names, Social Security numbers, state-issued identification numbers and financial records.

“On February 14, 2024, [Valsoft] became aware of unusual activity on a non-production computer network which is owned and managed by our subsidiary Aspire USA. Our internal security team identified an in progress file transfer which they were able to interrupt mid-transfer.

The investigation determined that an unauthorized actor accessed their network between February 12, 2024, and February 15, 2024, and took certain files within their network during that time. While the investigation was able to confirm that certain systems were accessed, it was unable to confirm which specific files within those systems were actually accessed or taken.” 

AllTrust Networks provides cash checking and risk management software to retailers that allows customers to encash their checks on-site.

The firm says it abruptly sent letters to individuals impacted to provide more information about the security incident while offering free 12-month credit monitoring services.

For now, the firm says affected customers should remain vigilant and immediately report any instance of fraud or identity theft to law enforcement.

Follow us on X, Facebook and Telegram