2023 MOVEit vendor breach — account switching service
Data compromised
Customer names, account numbers, IBANs
Technical writeup
Commerzbank customer data exposed via breach at Majorel Deutschland, the service provider for account switching services. Clop group exploited MOVEit Transfer vulnerability. Low four-digit number of customers affected. Bank's own systems not directly compromised.
Root cause
Third-party MOVEit vulnerability; Majorel vendor compromise