MalwareRansomwareData ExfiltratedCustomer Data InvolvedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Pacific City Bank
bd_0e35810e37c7ef7d · schema v1 · pii pii-v1
Full breach record for Pacific City Bank →Pacific City Bank filed a supplemental notification with the New Hampshire Attorney General regarding a ransomware attack. The incident was discovered on August 30, 2021, and confirmed on September 7, 2021. The breach impacted 4 New Hampshire residents, exposing names, SSNs, and financial data. The bank engaged forensic investigators, notified law enforcement, and provided one year of credit monitoring.
Leak gap clock⏱ Leak >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by avoslocker about this victim predates this filing by 79 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_da958afefb51ba4eNew Hampshire State AGfiled 2021-10-08(45d gap)Candidate
- bd_b83a0cdcbd978b19California State AGfiled 2021-10-07(46d gap)Candidate
- bd_bb2521bd60a774dfMontana State AGfiled 2021-10-07(46d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pacific-city-20211122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 22, 2021
- Raw hash
- 52505195a3ada478e660edc149e62d87c4086b8ba1518875c9f293d60e35e0d1
Reporting entity
- Name
- Pacific City Banknorm: pacific city bank
Victim entity
- Name
- Pacific City Banknorm: pacific city bank
Incident
- Discovered
- Aug 30, 2021
- Materiality determined
- —
- Notification sent
- Oct 7, 2021
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Pursuant to N.H. Rev. Stat. §§ 359-C:19, C:20, C:21
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.