AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowResolved

First Mid Bank & Trust, National Association

bd_079794c845cb099f · schema v1 · pii pii-v2

Severity

Low

Discovered

Nov 11, 2025

Filed

Jan 8, 2026

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for First Mid Bank & Trust, National Association →

First Mid Bank & Trust, NA reported a production error at third-party vendor HC3 on November 11, 2025, where a customer's bank account number was printed on another customer's statement. One Nebraska resident was notified on January 8, 2026. The incident involved identity and financial account data. No unauthorized network access occurred. Kroll provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 11, 2025

Begins

Nov 11, 2025

Discovered

Jan 8, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_31af623b0f7ce6122026-01-08Candidate
Illinois State AGbd_961ff24b210948f52026-01-01 · +7dVerified

Name: First Mid Bank & Trust, National Association
norm: first mid bank trust national

Name: First Mid Bank & Trust, National Association
norm: first mid bank trust national
Industry: Financial Servicesllm

Discovered: Nov 11, 2025
Breach occurred: Nov 11, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Misconfiguration
Threat actor: Partner

During the incident: Provided access to credit monitoring services for twenty-four (24) months, through Kroll
Provided impacted individual with guidance on how to better protect against identity theft and fraud
Remailed corrected statements
Changes made: Implemented corrective measures in processes designed to prevent any reoccurrence
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Illinois State AGJan 1 · first

Vermont State AG+7d

Nebraska State AG+7d · this page

Pattern: first filing Jan 1 (IL), last Jan 8 (NE) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/17228055-a1de-4da0-a5d8-0070b459a79d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 8, 2026
Raw hash: 2d5d7dfe9cb2aae76ecd17c6679dbe0455973e69d9d6cbd884019460eb96ffa0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFirst Mid Bank & Trust, National Association

Victim entityFirst Mid Bank & Trust, National Association

Incidentdiscovered Nov 11, 2025

Stated responseProvided access to credit monitoring services for twenty-four (24) months, through Kroll

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov