Hatch Bank

Hatch Bank, also known simply as Hatch Bank, is a bank headquartered in the United States of America. As a financial institution, it provides banking services to individuals and businesses operating within its market footprint. The organization came to public attention in January 2023 when it disclosed a data breach that affected approximately 140,000 of its customers. In that incident, attackers exploited a zero‑day vulnerability in Fortra's GoAnywhere MFT secure file‑sharing platform to obtain names and Social Security numbers. The breach was attributed to the Clop ransomware gang, which used the remote code execution flaw to exfiltrate the data. Following the disclosure, Hatch Bank notified affected individuals and offered them complimentary credit monitoring services.

The breach highlighted Hatch Bank's reliance on third‑party managed file transfer solutions for handling sensitive customer information, a common practice among financial firms seeking to streamline data exchanges. As a bank chartered and regulated under U.S. federal and state banking laws, Hatch Bank is subject to oversight by agencies such as the Office of the Comptroller of the Currency, the Federal Reserve, and state banking authorities. This regulatory environment requires the institution to maintain robust information security programs and incident response capabilities. The event also underscored the broader trend of ransomware groups targeting widely used file‑transfer software to compromise multiple organizations simultaneously. While the breach represented a significant security challenge, the bank's response included initiating an internal review and providing remediation assistance to impacted customers.