An extortion group called n0n published the passwords and keys to a firewall that guards the link Finzly's bank clients use to send payment instructions to the Federal Reserve.
Finzly connects 11 listed banks and credit unions to ACH, Fedwire and FedNow through a single shared connection. The leaked files describe a direct link labeled "FED" and rules for FedNow and FedACH traffic.
Finzly says it rotated its keys and credentials and that the files can't get anyone into its systems. The Fed says its payment services were not impacted.
The passwords were the easy part to fix. The map of how everything connects is still out there.
h/t
@CaitlinLong_