Abrigo Restores Sageworks Risk Platform After Suspected Cyber Intrusion, Borrower Tools Remain Offline

Abrigo, the financial‑technology firm behind the Sageworks risk management suite, announced that it has re‑enabled most of the application following an outage that officials attribute to a likely cyberattack.

The disruption began when the company detected "irregular activity" within its network, prompting an immediate shutdown of the Sageworks environment to contain any potential breach. While the core risk‑assessment modules are now back online, the borrower‑facing components of the platform remain inaccessible as engineers continue to verify system integrity.

Sageworks, acquired by Abrigo in 2022, provides lenders with analytics and reporting tools designed to evaluate credit risk, monitor loan performance, and comply with regulatory standards. The platform is widely used by banks, credit unions, and alternative lenders to automate underwriting decisions and maintain portfolio health. A loss of service can therefore hinder credit‑risk monitoring and delay loan processing for a broad swath of financial institutions.

The incident arrives amid a wave of cyber threats targeting the fintech sector, where high‑value data and real‑time processing make firms attractive targets for hackers. Industry analysts note that attacks on risk‑management systems can have cascading effects, potentially exposing sensitive borrower information or undermining confidence in automated credit‑scoring models.

Abrigo has pledged to keep clients updated as it conducts a thorough forensic investigation and works with law‑enforcement partners. The company said it expects to restore the borrower‑facing features once security checks are completed, though no firm timeline was provided. In the meantime, affected lenders are advised to rely on manual processes or alternative tools to service borrowers, underscoring the broader operational challenges that cyber incidents can impose on the financial ecosystem.