MisuseFinancial ServicesFinanceKnowledge AbusePrivilege AbuseCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

River City Bank, Inc.

bd_01b6e71c40f1563f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2020

Filed

Nov 20, 2020

To disclose

7 weeks

Affected · nationwide

17,6541 in this filing

Linked

4 filings

Confidence

50%

Full breach record for River City Bank, Inc. →

River City Bank reported a data breach affecting one Maine resident due to insider wrongdoing. The incident, which occurred and was discovered on September 29, 2020, resulted in the exposure of names combined with financial account or card numbers and their access codes. The bank notified the affected individual on November 20, 2020, and offered two years of credit monitoring and identity theft protection services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 29, 2020 → Filed with AG Nov 20, 202052d ⏱ ME AG >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 52 days

Sep 29, 2020

Begins

Sep 29, 2020

Discovered

Nov 20, 2020

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_1e5cabd0f65b2b872020-11-20Verified
Massachusetts State AGbd_25f4818f23943c702020-11-20Verified
Montana State AGbd_7743644ed47174dc2020-11-20Verified

Name: River City Bank, Inc.
norm: river city bank

Name: River City Bank, Inc.
norm: river city bank
Industry: Financial Servicesllm

Discovered: Sep 29, 2020
Breach occurred: Sep 29, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2020
Affected individuals: 17,654state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Insider
Threat actor: Internal

Changes made: Two-years, Kroll, Credit monitoring and identity theft protection services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: ME AG >30d · 52d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 29, 2020
→ Filed with AG: Nov 20, 2020
52d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 29, 2020 → Filed with AG: Nov 20, 2020	52d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGNov 20 · first

Massachusetts State AGNov 20 · first

Montana State AGNov 20 · first

Maine State AGNov 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6cc9729d-fb7b-462e-89e9-654e22dcf7d4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2020
Raw hash: ebde0b3659431d51e4bfe9426479e15952b886d89dbd4a902c56cf4991f461c7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRiver City Bank, Inc.

Victim entityRiver City Bank, Inc.

Incidentdiscovered Sep 29, 2020

Stated responseTwo-years, Kroll, Credit monitoring and identity theft protection services.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov