Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumActive

Reading Cooperative Bank

bd_02dea8362f280694 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 24, 2025

To disclose

—

Affected

16state residents only

Linked

7 filings

Confidence

68%

Full breach record for Reading Cooperative Bank →

Reading Cooperative Bank notified Maryland AG of a phishing incident where an employee clicked a malicious link, compromising credentials. Approximately 16 Maryland residents' PII (including government IDs) may be impacted. RCB engaged forensic experts, secured systems, and offers 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 24, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_03550ed043b521c42025-02-24Verified
New Hampshire State AGbd_286bccc460c3cdad2025-02-24Verified
Massachusetts State AGbd_a396175b2a2904f82025-02-24Verified
Maine State AGbd_b84836cd62e897a22025-02-24Candidate

Show 2 more filings ↓

Nebraska State AGbd_bcd60efbdc435af32025-02-24Verified
Indiana State AGbd_c359101a4dbd2ec02025-02-24Verified

Name: Reading Cooperative Bank
norm: reading cooperative bank
Domain: readingcoop.com

Name: Reading Cooperative Bank
norm: reading cooperative bank
Domain: readingcoop.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Feb 24, 2025
Affected individuals: 16state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Maryland Office of the Attorney General, Consumer Protection Division
Initial access: phishing_link

During the incident: Engaged legal counsel and cybersecurity forensic experts to assist in its investigation
Took steps to secure its systems
Implemented additional cybersecurity safeguards
Offering complimentary access to Experian IdentityWorks for 24 months
Changes made: Implemented additional cybersecurity safeguards
Working closely with internal and external experts to further enhance the security of its systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGFeb 24 · first

New Hampshire State AGFeb 24 · first

Massachusetts State AGFeb 24 · first

Maine State AGFeb 24 · first

Nebraska State AGFeb 24 · first

Indiana State AGFeb 24 · first

Maryland State AGFeb 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376406.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2025
Raw hash: 677aecf8e46213970f0897ca7cf304a4d7559a8aa74a1b3138ca6083183f1149

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityReading Cooperative Bank

Victim entityReading Cooperative Bank

IncidentPhishing

Stated responseEngaged legal counsel and cybersecurity forensic experts to assist in its investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov