Abrigo Sageworks cybersecurity incident
Public report preview
A cybersecurity incident led Abrigo to take its Sageworks lending platform offline Oct. 30, 2026, disrupting analysis, integrations and borrower-facing services used by U.S. financial institutions. Sageworks Analyst and the API are operational, but a Nov. 5 official notice confirms borrower-facing capabilities remain unavailable. Abrigo confirmed unauthorized access; ransomware, data theft, attribution and full restoration remain unresolved.
- Organization
- Location
Recent incident intelligence
Paid member report preview
Unlock the complete incident report
New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.
Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.
See something that needs correction?
Signed-in members can report an error, update, or missing source.