PRITS urges monitoring of accounts following Evertec cybersecurity incident

Following a cybersecurity incident reported by Evertec, Puerto Rico Innovation and Technology Service Executive Director Poincaré Díaz Peña said the best defense against such incidents is an informed public that verifies the authenticity of messages received, uses strong passwords, and activates additional security mechanisms on their accounts.

By THE STAR STAFF

Puerto Rico Innovation and Technology Service (PRITS) Executive Director Poincaré Díaz Peña urged the public on Thursday to monitor their bank accounts and cards following a cybersecurity incident reported by Evertec.

“Cybersecurity incidents can affect any organization, so it is important for the public to remain alert and adopt preventive measures to protect their personal and financial information,” Díaz Peña said in a written statement.

According to information released by Evertec, an unauthorized party gained access to data stored on a platform operated by a third-party provider used for monitoring system performance.

Potentially compromised information includes payment card numbers and, in some cases, names, expiration dates, dates of birth, phone numbers, and other contact information.

Díaz Peña said the best defense against such incidents is an informed public that verifies the authenticity of messages received, uses strong passwords, and activates additional security mechanisms on their accounts.

PRITS recommended that consumers regularly review bank account and credit card transactions, pay attention to communications from their financial institutions, and immediately report any suspicious activity.

It also warned of potential fraud attempts via emails, text messages, or calls appearing to come from financial institutions or companies related to the incident.

“Regarding any communication requesting personal information, access credentials, or banking data, we recommend verifying directly with the financial institution using official channels,” Díaz Peña added.

As preventive measures, PRITS recommended using unique passwords for each account, enabling two-step verification or multi-factor authentication, being wary of unsolicited links, and keeping devices and applications updated.

The agency also urged people to review account statements and credit reports, protect personal data, and avoid sharing sensitive information without verifying the requester’s legitimacy.

Díaz Peña noted that the incident is unrelated to Puerto Rico government systems or platforms.

“Events of this nature highlight the importance of continuing to develop and implement the accountability mechanisms outlined in Law 40-2024 for technology service providers involved in handling and processing sensitive information,” the official said.

PRITS stated that it will continue to promote cybersecurity education and awareness to strengthen digital protection for the public and foster a culture of prevention against cyber threats.