Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

BankMobile (BM Technologies)

fintech · US · North America · BM Technologies, Inc.

Confirmed cyberStatus: activeTier 1Severity 3 of 5Evidence confidence: highAnalyst-verified

After attackers took over BankMobile student refund accounts, the California Community Colleges Chancellor's Office directed districts to pause electronic aid disbursements through BM Technologies from early October 2026 and pay by paper check. About 65,000 accounts had data changed and about 400 had refunds taken.

First disruption
Sep 1 00:00 UTC
First public signal
Oct 2 (Los Rios district email reported by Sacramento City College Express)
Acknowledged
Oct 2
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

payoutsachonline bankingScope: multi institution

California Community Colleges Chancellor's Office directed districts to pause electronic disbursements through BM Technologies and use paper checks; financial aid refunds delayed; Los Rios moved to Nelnet and may keep paper checks.

Financial impact: Undisclosed; about 400 refunds taken

Cause, kept in separate layers

What the institution said
Unauthorized individuals gained access to a significant number of BankMobile student accounts (Los Rios); BM Technologies did not comment
DFX classification
Confirmed cyber (cyber: confirmed)
Analytical hypothesis (not established)
Account takeover through a weakened account verification process (secondary reporting citing state officials).
Wording used
All available evidence indicates that Los Rios systems and data remain secure
Conflicting reports
District count about 55 vs 60. Exact date of Chancellor's Office pause directive not stated. Restriction partly began before 1 Oct.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Downstream: California community college districts (Los Rios, Shasta, Santa Monica and others): electronic aid disbursements paused, paper checks issued (documented)

Evidence