HackingFinancial ServicesFinanceCapture App DataSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIPCILowContained
Salem Five Cents Savings Bank
bd_0e53904ce3659e46 · schema v1 · pii pii-v1
Full breach record for Salem Five Cents Savings Bank →Salem Five Bank notified 1 Maine resident (21 total) of a security incident at a third-party merchant that exposed customer name, address, and debit card numbers on transactions conducted between March 16, 2023 and June 15, 2024. The breach was discovered on October 15, 2024 and customers were notified October 16, 2024. As a precaution, Salem Five reissued affected debit cards and deactivated old cards on October 25, 2024. No identity theft protection services were offered.
Maine clockDiscovered Oct 15, 2024 → Filed with AG Oct 18, 20243d ✓ ME AG ≤30d3 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4c471f52-e2b1-4e36-b76a-cc59efe39c7a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- 5669f4f8b7772791d41c2c6b1bba75e68b667cee60f54461501e4b9817676da7
Reporting entity
- Name
- Salem Five Cents Savings Banknorm: salem five cents savings bank
- Domain
- salemfive.com
- Industry
- Financial Services
Victim entity
- Name
- Salem Five Cents Savings Banknorm: salem five cents savings bank
- Domain
- salemfive.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Oct 15, 2024
- Materiality determined
- —
- Notification sent
- Oct 16, 2024
- Affected individuals
- 1
- Data types
- PIIPCI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notification filed with Maine Attorney General
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 3d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 15, 2024→ Filed with AG: Oct 18, 20243d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.