Abrigo Sageworks cybersecurity incident
Abrigo · Raleigh, North Carolina
Summary
A cybersecurity incident led Abrigo to take its Sageworks lending platform offline Oct. 30, 2026, disrupting analysis, integrations and borrower-facing services used by U.S. financial institutions. Sageworks Analyst and the API are operational, but a Nov. 5 official notice confirms borrower-facing capabilities remain unavailable. Abrigo confirmed unauthorized access; ransomware, data theft, attribution and full restoration remain unresolved.
Key facts
- Added to watchlist
- Nov 2, 2026
- Incident end
- Not yet known
- Left watchlist
- Nov 2, 2026
- Became a cyber incident
- Nov 2, 2026
- Organizations · registry
- Abrigo
- Impacted locations · registry
- Raleigh, North Carolina
Watchlist history
- Added to watchlist
- Became a cyber incident