Abrigo, which provides cloud software to US community banks and credit unions, said on its status page on 30 October 2026 that it identified irregular activity in its environment and, out of an abundance of caution, disabled the Sageworks application at about 11:25 am US Eastern time (11:25 pm Perth). The incident covers Sageworks Analysis, the Sageworks API and Online Portal Now.

Abrigo's updates over 30 October to 1 November said its team continued to investigate and that notices were going to Product and IT & Security contacts at customer institutions; on 2 November at 07:11 US Eastern time (8:11 pm Perth) it said the Sageworks platform was available again with the exception of borrower-facing capabilities, and that it was monitoring. Abrigo's status updates do not say what the irregular activity was or whether any data was accessed. (source: Abrigo status page)

BleepingComputer reported on 2 November that Abrigo serves more than 2,400 institutions, that Sageworks handles sensitive information including banking customer details, and that Abrigo had not responded to its request for details, so it is unclear whether the outage was caused by a breach or a technical issue. (source: BleepingComputer)