DisclosureLens
HackingFinancial ServicesFinanceData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Norway Savings Bank

bd_0db7aa680f46cca6 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Aug 14, 2025

Filed

Nov 21, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

68%
Full breach record for Norway Savings Bank →

Norway Savings Bank (NSB) notified Nebraska regulators and customers of a data security incident involving a third-party marketing vendor. On August 14, 2025, NSB was informed of the breach; on October 27, 2025, customers were notified. Exposed data included names, addresses, DOB, SSN, tax IDs, and debit card numbers. NSB states its internal systems were not compromised and provided free credit monitoring.

Incident timeline

Aug 14, 2025

Discovered

Nov 21, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Nebraska State AGNov 21 · first · this page
Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.