HackingFinancial ServicesFinanceStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountFinancialMediumResolved

Plains Commerce Bank

bd_0428b6dd3ebc05fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 27, 2021

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

85%

Full breach record for Plains Commerce Bank →

Plains Commerce Bank discovered suspicious activity related to employee email accounts. An unknown perpetrator may have gained access to ten employee email accounts between December 10, 2020 and January 15, 2021. Confirmed on January 20, 2021; data review completed April 27, 2021. Potentially exposed data includes names, addresses, SSNs, loan information, and financial account information. 3 Rhode Island residents affected.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 10, 2020

Begins

May 27, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_0c2b14534f2a0dad2021-05-27Verified
Massachusetts State AGbd_2a861c05ece55b602021-05-27Verified
Montana State AGbd_7c8af5e8d5f5730e2021-05-27Verified
Indiana State AGbd_97a68cf8b20b6c812021-05-27Verified

Show 2 more filings ↓up to 146d gap

New Hampshire State AGbd_4b1061280c6de9ab2021-06-01 · +5dVerified
Illinois State AGbd_94edaa7272227ac72021-01-01 · +146dCandidate

Name: Plains Commerce Bank
norm: plains commerce bank
Domain: plainscommerce.com

Name: Plains Commerce Bank
norm: plains commerce bank
Domain: plainscommerce.com
Industry: Banking
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Dec 10, 2020 – Jan 15, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Immediately launched an investigation to determine the nature and scope of the activity and confirm the security of relevant systems
Working with third-party forensic investigators, confirmed that an unknown perpetrator may have gained access to ten employee email accounts
Immediately took steps to secure our systems
Undertook efforts to review the general types of information present in the email accounts and locate address information for those individuals whose information might have been present
Changes made: Taking steps to implement additional safeguards and review our policies and procedures in order to ensure we protect the security of information on our systems
Offering a complimentary 12-month membership of Experian's IdentityWorks to affected individuals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+146d

Massachusetts State AG+146d

Montana State AG+146d

Indiana State AG+146d

California State AG+146d · this page

New Hampshire State AG+151d

Pattern: first filing Jan 1 (IL), last Jun 1 (NH) — a 151-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-541365
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 27, 2021
Raw hash: b02c569fe2f251ae38dcec3704438369c4f9f91ee53c12980441294a50500080

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityPlains Commerce Bank

Victim entityPlains Commerce Bank

IncidentUnauthorized Access

Stated responseImmediately launched an investigation to determine the nature and scope of the activity and confirm the security of relevant systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov