[pwd72s]

I'm wondering if this is pishing or legit? Supposedly from our bank. Anybody here get a similar email?



On Thursday June 22, we shared with you via email that personal information for a segment of Umpqua’s customers was accessed due to a third-party vendor’s exposure in the global MOVEit Transfer cybersecurity incident. Our investigation has unfortunately revealed that your name and Social Security Number were involved in this incident. No banking information was involved, and you should continue to bank as you always do. We understand this news is frustrating and apologize for the inconvenience.

Your relationship with us is very important and safeguarding your personal and financial information is a responsibility we take seriously. We have been working closely with our vendor—who we can now share is Fidelity National Information Services, Inc. (FIS)—to provide 24 months of identity monitoring and theft resolution services to you at no charge.

While we have no evidence at this time that your personal information has been used in an unauthorized way, we are reaching out today to:

Provide an update about what happened.
Inform you to be on the lookout for the official notification letter. This letter will arrive in your mailbox in the coming days. It includes important instructions about how to access your 24 months of identity monitoring and theft resolution services available to you at no charge.
What Happened
On May 31, 2023, Progress Software reported a previously unknown vulnerability in its MOVEit Transfer tool. Thousands of companies, including one of our business partners, FIS, use this file transfer tool to move data files.

FIS is a global financial technology services provider that works with most of the world’s leading banks and supports more than one million merchants around the globe. When you buy a coffee, check your balances, or invest in your 401(K), you’re likely running on FIS software. Like many banks, Umpqua uses FIS’s technology services.

Upon notification, FIS immediately suspended use of the MOVEit Transfer tool, and it remained disabled until they received and implemented a software patch to remediate the issue. FIS also launched an immediate investigation working in partnership with Umpqua and alongside cyber experts and appropriate law enforcement agencies. The investigation has revealed evidence that an unauthorized third party potentially accessed certain files transferred through MOVEit Transfer that contained some of your personal information.
Watch Your Mail
The global MOVEit Transfer cybersecurity incident has led to the unauthorized access of information from millions of people. While we have no evidence at this time that your personal information has been used in an unauthorized way, given the widespread nature of this incident, we highly encourage you to enroll for your no-cost identity monitoring and threat resolution services using the personalized login instructions that will be mailed to you.

Please be on the lookout for a notification letter from Umpqua Bank, which should arrive in the coming days. This letter includes important instructions about how to access your 24 months of identity monitoring and theft resolution services available to you at no charge.

Your notification letter includes contact information for a dedicated support line that you can use to receive assistance setting up your identity monitoring and threat resolution services. For any other questions, please feel free to reach out to your local banker or call us at (866) 486-7782.

In the meantime, please know that we take this matter very seriously, and we sincerely apologize again for any concern and inconvenience this may cause you.


Sincerely,

Chris Merrywell
President, Consumer Banking
Umpqua Bank