TruStage Faces 14 Lawsuits After Monthslong Cyber Outage
TruStage provides financial, insurance and payment-protection services to credit unions and banks, making its systems part of the infrastructure that financial institutions rely on to serve customers. A cyberattack that disrupts those operations can expose institutions to business interruptions, data-security concerns and legal claims, while testing how responsibility is divided when a critical third-party vendor fails.
The attack left TruStage systems disrupted for months, according to the latest report, and the company has yet to determine whether customer information was compromised. The incident has now prompted at least 14 proposed class-action lawsuits. The cases seek to assign responsibility for cybersecurity safeguards and the response to the outage, potentially clarifying the legal exposure of TruStage as well as the credit unions and banks that use its services.
All Coverage
1 original reportsThe Backstory
The history behind this eventCredit Union Sues TruStage Over Cybersecurity Outage
Pennsylvania-based Bessemer System Credit Union relies on TruStage as a primary provider of financial and technology services. The dispute highlights the concentration risk created when smaller financial institutions outsource critical systems to third parties. It could also become an important test of whether credit unions and other financial institutions can force vendors to absorb costs tied to cybersecurity failures, rather than leaving institutions and their members to bear outage and recovery expenses.
Bessemer System has filed a proposed class action against TruStage after the vendor took its network offline in response to a cybersecurity incident, blocking members from services including access to 401(k) accounts. The available report did not specify the filing date, outage duration, number of affected members or damages sought. The case will turn partly on TruStage’s contractual obligations and whether its security failures or incident response breached duties owed to client institutions.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.