Lessons from the 2023 Medusa Cyberattack and CFPB Settlement

In November 2023, TFS Europe & Africa was hit by the Medusa ransomware gang demanding $8 million via a vulnerable Citrix Gateway endpoint. Just days later, the CFPB ordered Toyota Motor Credit to pay $60 million for illegal lending and credit reporting misconduct around add-on products like GAP and CLAH. This module covers what happened, how TFS responded, and how candidates should discuss compliance, risk, and customer trust during interviews — with appropriate humility and honesty.