Popular reports third-party cybersecurity incident affecting BPPR data

Key Highlights

• Cybersecurity incident at third-party vendor Evertec affected Banco Popular de Puerto Rico (BPPR) customer data.
• Incident compromised personal information, including debit card numbers, of certain BPPR customers.
• Popular's own systems were not accessed or otherwise affected by the incident.
• Company initiated incident response protocols, implemented enhanced fraud monitoring, and notified regulators.
• Affected customers will be notified directly, as appropriate.
• Popular has a contractual right to be covered by Evertec for losses and related costs.
• Company does not believe the incident is reasonably likely to have a material impact on its operations or financials.