Abrigo Takes Sageworks Offline After Suspicious Activity, Partially Restores Service

Abrigo took its Sageworks risk management platform offline on October 30 after detecting irregular activity, disrupting services through the weekend. The outage affected Online Portal Now, Sageworks Analyst and the Sageworks API. Most functionality had been restored by November 2, but borrower-facing capabilities remained unavailable at the time of reporting. Abrigo serves more than 2,400 U.S. community banks and credit unions, and Sageworks processes sensitive banking information for loan applications and portfolio monitoring.

Abrigo has not disclosed the incident’s nature or confirmed whether it involved a data breach or a technical failure. Cybersecurity researchers recommended that banks and credit unions using Sageworks rotate API keys as a precaution, despite the absence of a confirmed breach. Earlier in the year, an individual claiming affiliation with ShinyHunters alleged the theft of 1.7 million Salesforce records from Abrigo; that claim remains unverified, and no connection to the current disruption has been established.