Claim: Abrigo takes Sageworks offline after suspicious activity; portal and API down
Abrigo took the Sageworks credit analysis platform offline on October 30 after detecting irregular activity in its environment, bringing down the customer portal and the API. The company is investigating and has not confirmed data access, ransomware involvement, or who is responsible. Banks and financial institutions using the service should activate contingency plans and follow Abrigo updates.
What happened
Abrigo shut down the Sageworks platform, the customer portal, and the API on October 30 after detecting irregular activity in its environment. The company is investigating and has not confirmed data access, ransomware involvement, or who is responsible.
Why it matters
Banks and financial institutions that rely on Sageworks for lending, credit analysis, and risk management are without the platform, the portal, and the API. The outage can delay credit decisions until service is restored, and possible data exposure remains unconfirmed.
What to do
Activate contingency plans for credit analysis and risk management while the service is offline. Review integrations that depend on the Sageworks API and follow official Abrigo updates on the investigation.
For the technical team
- Affected
- Abrigo Sageworks, plataforma de análise de crédito e gestão de risco usada por bancos e instituições financeiras; portal de cli · Abrigo's Sageworks platform for lending, credit analysis, and risk management; customer portal and API. Versions not specified.
- Exploitation
- No confirmed exploitation: Abrigo has not confirmed data access, ransomware involvement, or responsible parties. No public PoC or KEV. Reported by DarkWebInformer.
- Fix
- No fix applicable; the platform, portal, and API remain offline during the investigation.
- Vector
- Irregular activity detected within Abrigo's environment; vector, affected component, and exploitation conditions not disclosed.
- More details
- Takedown occurred on October 30. Sageworks is used by banks and financial institutions. Single source: DarkWebInformer on X.
Timeline
First report: Abrigo takes Sageworks, its customer portal and API offline on October 30 after suspicious activity; investigation is ongoing.
Sources 1 source
- @DarkWebInformer @DarkWebInformer
