Evertec

Popular, Inc. was pulled into a cybersecurity incident through Evertec, the third-party provider it relies on for core financial transaction processing and IT services. The compromise affected data belonging to Banco Popular de Puerto Rico, illustrating a familiar problem: outsourcing the technology does not outsource the exposure. The attack did not need to breach Popular directly; compromising a trusted provider was enough to reach the bank’s data.