Banco Popular Vendor Used “Legacy” Software, Exposing PII Complaint

May 12, 2022

It seems that personally identifiable information (PII) can now get exposed not just through a company that does not take adequate care of it, but also through its vendors, and even its vendors’ vendors. This class action concerns a data breach that exposed the information of customers of Banco Popular de Puerto Rico, which occurred through one of its vendors, via a vulnerability in a legacy file-sharing software product from Accellion called Accellion FTA.