Patelco has confirmed that on Monday the large Northern California credit union was down for “around two hours” in a Distributed Denial of Service (DDoS) attack which overwhelms a web host with data, effectively knocking it out of commission.
Speaking in an informal interview at a CUNA GAC event on Tuesday, Ken Burns, CEO of the $3.8 billion Pleasanton, Calif., corroborated the two-hour outage.
Burns indicated that the upside is that, in January, in a first attack, the credit union was down for over five hours so the responses it implemented at that point had benefits.
But Burns also indicated he expected better and would be reviewing next steps with his internal IT staff and a third-party DDoS mitigation contractor Patelco has retained. He declined to name the contractor.
Last week NCUA issued its first DDoS “risk alert,” advising credit unions on must do’s in regard to this disruptive attack format.
The current Patelco attack appeared to be the work of the same highly skilled group that perpetrated the first, the so-calledal-Qassam Cyber Fighters, generally thought to be associated with Iran, although that link has not been proven.
In the recent Patelco attack, only the member-facing website was impacted, said Burns. He elaborated that mobile banking, for instance, still had normal functioning throughout the attack. He also stressed there was no indication of any frauds committed in association with the DDoS attack, which had been a warning in the NCUA alert.
Respected security blogger Brian Krebs last week reported on a $900,000 cyber theft at San Francisco-based Bank of the West that, reported Krebs, was committed in association with a DDoS attack. The DDoS appears to have been used to confuse and distract bank IT security.
Burns stressed nothing of that kind had occurred at Patelco.
