In a brief statement, COO Tom Kilroy says Finastra has called in an independent forensic firm to investigate the scope of the incident.

"We are in touch directly with any customers who may be impacted. Safeguarding our assets and those of our customers remains paramount," says Kilroy.

In a separate message to customers, seen by security blogger Brian Krebs, Finastra calls the incident a "potential security breach" and warns "we are anticipating some disruption to certain services, particularly in North America".

With servers offline, the company closed some offices in Canada and London, although most staff were already working from home because of the Covid-19 pandemic, Finastra tells Krebs.

Finastra issued the following statement, attributed to Tom Kilroy, Chief Operating Officer:

Earlier today, our teams learned of potentially anomalous activity on our systems. Upon learning of the situation, we engaged an independent, leading forensic firm to investigate the scope of the incident. Out of an abundance of caution and to safeguard our systems, we immediately acted to voluntarily take a number of our servers offline while we continue to investigate.

At this time, we strongly believe that the incident was the result of a ransomware attack and do not have any evidence that customer or employee data was accessed or exfiltrated, nor do we believe our clients’ networks were impacted.

We are working to resolve the issue as quickly and diligently as possible and to bring our systems back online, as appropriate. While we have an industry-standard security program in place, we are conducting a rigorous review of our systems to ensure that our customer and employee data continues to be safe and secure. We have also informed and are cooperating with the relevant authorities and we are in touch directly with any customers who may be impacted as a result of disrupted service. 

Finastra takes data security very seriously, and we have committed to updating our stakeholders regularly and providing more information as soon as our investigation into this matter continues.