HackingVulnerability ExploitZero-DaySupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Hatch Bank
bd_0b51f783a5baaeea · schema v1 · pii pii-v1
Full breach record for Hatch Bank →Hatch Bank reported a third-party data breach that occurred due to a zero-day vulnerability. The breach, which took place between January 30 and January 31, 2023, and was discovered on February 7, 2023, affected 631 Maine residents. The compromised information includes names and Social Security numbers. Hatch Bank offered 12 months of credit and identity monitoring services through CyberScout to the affected individuals.
Maine clockDiscovered Feb 7, 2023 → Filed with AG Feb 28, 202321d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed631 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4cfbf86f-8d04-4296-9195-81b874ba939a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2023
- Raw hash
- a834a29cf1c1f0348003bdceaa5630c7c7048a06f30e46f9bbcf96c3ed9b927d
Reporting entity
- Name
- Hatch Banknorm: hatch bank
- Industry
- financial_services
Victim entity
- Name
- Hatch Banknorm: hatch bank
- Industry
- financial_services
Incident
- Discovered
- Feb 7, 2023
- Materiality determined
- —
- Notification sent
- Feb 28, 2023
- Affected individuals
- 631
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 7, 2023→ Filed with AG: Feb 28, 202321d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.