2020 Finastra — ransomware; global server shutdown, banking/payments customer disruption (Mar)
Data compromised
Financial transaction processing and customer tenant data—specific field exposure not summarized in a single Finastra-wide tally in the earliest press wave
Technical writeup
London-headquartered financial-software giant Finastra took large parts of its hosted infrastructure offline after detecting ransomware on March 19–20, 2020, disrupting online services for trading, payments, and lending customers worldwide until recoveries progressed. Krebs on Security, BleepingComputer, Bloomberg follow-ups, and Finastra customer letters summarized forensic containment, restoration, and customer communications; contemporaneous reporting also referenced unpatched edge appliances (e.g., Pulse Secure / Citrix) as context in post-incident analysis. Uniform individual victim counts were not published centrally.
Root cause
Ransomware detonation across Finastra cloud/server estate (vendor-confirmed)