Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Finzly
bank payments vendor · U.S. (NC)
What happened
Finzly confirms unauthorized access to a single device in its backup data center that held configuration information. Files said to come from that device were published by the attacker.
None reported at clients or Fed services.
What remains unknown
- Timing of key rotation relative to the leak
- Whether any client institution had to take its own remediation steps
Losses: none disclosed
Capital around this company
- Listed investorInvestor portfolio pageTZP Management Associates, LLC
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
Sources
- Extortion group leaks keys to bank vendor's Fed firewall (baseline; American Banker, last update 30 Oct 13:27 EDT) · 2026-10-30T16:12Z
- Finzly search sweep, 2 Nov (Dexpose and BreachSense tracker entries dated 19 and 20 Oct; no November item) · 2026-10-19
- EDGAR full-text search: "Item 1.05" in 8-K, 1 Oct to 2 Nov 2026 (3 hits: Park Dental Partners SIC 8090, Agassi Sports Entertainment SIC 5900, Koil Energy SIC 3533; no financial issuer) · 2026-11-02
- American Banker: Extortion group threatens to leak bank vendor's secrets (client list per baseline k_finance) · 2026-10-20
Does Finzly touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.