Social EngineeringFinancial ServicesFinancePretextingStolen CredentialsCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIFINANCIALIDENTITY_GOVERNMENTMediumResolved
West Florida Banking Corporation
bd_03a9c377e151faa3 · schema v1 · pii pii-v1
Full breach record for West Florida Banking Corporation →West Florida Banking Corporation (Flagship Bank), a Clearwater FL financial institution, suffered unauthorized access on April 15, 2025 via a social engineering scheme. Discovered May 7, 2025. Exposed data: names, Social Security numbers, financial account information. 2 Maine residents affected (3,996 total). Notice sent Feb 13, 2026. Law enforcement notified. 12-month credit monitoring via TransUnion offered.
Maine clockDiscovered May 7, 2025 → Filed with AG Feb 13, 2026282d ✗ ME AG >90d40 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_19c4e24cf0267780Indiana State AGfiled 2026-02-13Verified
- bd_560d94fb8a86f80fIndiana State AGfiled 2026-02-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f91c16f8-8948-4252-965c-f17db51e2737.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 13, 2026
- Raw hash
- 1f0f46699b21bd11e6c6eab1dd819d5acda89307e3825662eb202b2b48342555
Reporting entity
- Name
- West Florida Banking Corporationnorm: west florida banking
- Domain
- flagshipbank.com
- Industry
- Financial Services
Victim entity
- Name
- West Florida Banking Corporationnorm: west florida banking
- Domain
- flagshipbank.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- May 7, 2025
- Materiality determined
- —
- Notification sent
- Feb 13, 2026
- Affected individuals
- 2
- Data types
- PIIFINANCIALIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement.Notifying relevant state and federal regulators.Notified Equifax, Experian, and TransUnion.
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 40 weeks(282 days from discovery to filing)
- Compliance flags
- ME AG >90d · 282dME resident >180d · 282d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 7, 2025→ Filed with AG: Feb 13, 2026282d 90 days ME AG >90d Maine Discovered: May 7, 2025→ Notified: Feb 13, 2026282d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.