Trust Center
As a security company, StackAware takes its own cybersecurity posture seriously. As an early stage startup, we rely heavily on no- and low-code platforms to facilitate rapid development of business logic. We seek to be as transparent as possible regarding the technological dependencies of our application so that customers can make informed risk management decisions.
We will continue to implement best practices, pursue third-party attestations and certifications, and provide additional information to customers and prospects.
Trust Center Updates
On July 29, 2024, StackAware received the following update from Mercury:
"While we don’t have account-specific details, we share the following information with Evolve in the normal course of business and it’s likely that some of your company's data was included: name(s), phone numbers, addresses, and email addresses for businesses and their beneficial owners, overall account balance, business bank account numbers, business EIN, and certain transaction information, including: the entities you transact with and their information such as the sender and receiver’s address, account number, and transaction amounts."
Due to the methods by which StackAware receives payment from its customers, only a narrow portion of them were potentially impacted.
With that said, StackAware has notified all those who could have been affected directly, and is formally closing out this incident.
At 4:06pm Eastern Time on 26 June 2024, StackAware received an alert from one of its vendors, the financial technology company Mercury.
Mercury wrote:
"We recently became aware of a cybersecurity attack that breached the security systems of one of our partner banks, Evolve Bank & Trust, and leaked their records, including some account numbers, deposit balances, business owner names, and emails associated with Mercury and other fintech accounts."
StackAware immediately inquired of Mercury as to whether StackAware customer or business partner information was involved in the breach, to which Mercury replied it was still investigating the incident.
We will issue an update clarifying if anything more than just StackAware's information was impacted by this breach as soon as we hear from Mercury.
If you think you may have discovered a vulnerability, please send us a note.