Rather, they had their data stolen because of a breach at a third-party provider using MoveIt.įor example, compliance tech company Sovos has reported to the state attorneys general of Maine and California that it is sending data breach notifications to customers at multiple companies, including seven financial institutions: Midland States Bank, First Internet Bank, First Tech Federal Credit Union, Global Federal Credit Union, Pacific Premier Bank, Patelco Credit Union, and State Street Bank and Trust Company. Some of the banks that have newly reported that their data had been compromised did not even use MoveIt software directly.