Westlake Financial was among hundreds of organizations globally compromised via the MOVEit Transfer supply-chain attack attributed to the Clop ransomware group. Texas operations data for 178,000 customers was affected.
Supply-chain attack via MOVEit Transfer zero-day (CVE-2023-34362). Clop ransomware group exploited the SQL injection vulnerability in MOVEit's web-facing interface to exfiltrate data before the patch was widely applied. No encryption deployed — pure data theft.
Sentinel ($89/ep/mo) — 24/7 SOC + SIEM. Fortress ($109/ep/mo) — Sentinel + EDR management + vulnerability management. Command ($129/ep/mo) — Fortress + vCISO + compliance mapping + IR plan. See full tier comparison →
| Regime | Standard / Citation | Gap Identified |
|---|---|---|
| GLBA | Safeguards Rule §314.4(f) | Third-party service provider oversight — vendor patch timeline not contractually enforced |
| TDPA | Tex. B&C Code §521.053 | TX customer notification required; delayed notification triggered regulatory scrutiny |
CoreRecon cites verifiable public sources only. No speculation on unverified attribution is published. Threat actor attribution appears only where publicly confirmed by law enforcement or the organization.
Free $2,500 security posture assessment for Texas organizations. We map your gaps against the same attack vectors used in this incident. No contract, no commitment.