Central 1 status

Official status checked

Central 1 is experiencing issues

Official incident resolved

INC230473: iOS mobile app Login errors — The issue affecting a subset of Forge mobile app users on iOS devices when using password login has been resolved. Investigation identified a Web Application Firewall (WAF) rule change that was impacting this specific login traffic. The rule has been adjusted and login functionality has been restored. Android users and biometric login were not affected, and the issue did not impact all Credit Unions or all iOS users. All relevant teams remain engaged and are monitoring the service. Further investigation will be completed with Intellect Design to understand why the WAF rule affected this traffic and to identify any appropriate preventative measures. Central 1 - [email protected] - 1.888.889.7878, press 2

Official incident active

INC230293 -- PHP Zero-Day Vulnerability Security Threat — Central 1 recently completed an assessment of the newly disclosed zero-day vulnerabilities affecting PHP, a widely used technology that underpins many web-based platforms, including WordPress. We are aware that clients may have concerns regarding the potential impact to Forge online banking services. As part of our investigation, Central 1 reviewed the applicability of these vulnerabilities across our environment. The assessment determined that the identified PHP exposure was limited to a non-critical vanity URL redirect service used by a single client feature. As a precautionary measure, this service was taken offline. Additional housekeeping activities were also completed, including the removal of PHP from systems where it was not required and the removal of an obsolete service. As a result of these actions, the identified threat exposure has been contained, and no additional remediation activities are currently required. At this time, there is no evidence that Central 1 online banking services have been compromised or adversely affected by these vulnerabilities. We will continue to monitor the situation and follow our established security response processes should new information become available. [email protected] 1.888.889.7878 (option 2)

Official maintenance active

Resolved - INC229726 - AFT Due Date Issue — Central 1 has confirmed that the changes implemented last night have resolved the issue affecting AFT transactions where the due date could change by one day after an AFT record was created or modified. Central 1 - [email protected] - 1.888.889.7878, press 1

Official maintenance active

CHG175932 - Urgent Digital Banking Core Release 779_1 — Please be advised that due to a small number of outstanding Information Security (InfoSec) issues. The production deployment of the MD and AFT Hotfix release has been rescheduled to Wednesday October 21 at 1 a.m. PT (4 a.m. ET)