The Bank was not the target of the attack – other Accellion FTA users around the world have also been affected. We had no warning to avoid the attack which began in mid-December. Accellion failed to notify us for five days that an attack was occurring against its customers, and that a patch was available that would have prevented this breach.
If we were notified at the appropriate time, we could have patched the system and avoided the breach. Our own analysis has identified shortcomings in our processes once the system was breached. The impact this had is part of the review underway.