On or around February 28, 2023, Hatch Bank announced that a cybersecurity breach left its servers susceptible to attack. Around February 3, 2023, the company learned that a ransomware incident exposed sensitive and private information. An unknown actor was able to access the company’s organization information, potentially leaving consumer data vulnerable and 140,000 individuals at risk.

Hatch Bank is a bank and fintech company based in San Marcos, California. The company operates a fintech platform called Powered by Hatch with API connectivity, offering rates competitive with major financial institutions. In late January 2023, Hatch learned of a ransomware incident targeting its servers, but has not elaborated on this discovery. Hatch immediately engaged in an investigation, uncovering that an unauthorized actor had gained access to its systems between January 30 and 31, 2023., but Hatch did not start notifying consumers until late February 2023. Consumers remained unaware for a significant period of time before hearing news of the data breach. This could have potentially left many individuals affected by fraud unaware of a likely reason.

Consumer information including at least names, Social Security Numbers and potentially much more have been exposed.

If you received a letter from Hatch Bank indicating that your information was involved in a data breach, fill out the the form below to participate in Shub Law’s investigation.