HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDownstream VictimsIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained

Rollstone Bank & Trust

bd_0f7747c25a643ec6 · schema v1 · pii pii-v1

Full breach record for Rollstone Bank & Trust →

Rollstone Bank & Trust reported a third-party data breach involving service provider Alera Group. Unauthorized access occurred July 19–August 4, 2024, affecting one New Hampshire resident's PII, PHI, and financial data. Alera Group discovered the incident on August 4, 2024, and confirmed Rollstone's data was involved on April 28, 2025. Notices sent July 17, 2025, with credit monitoring offered.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rollstone-bank-trust-20250703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2025
Raw hash: 7b8440ce2570d60f7dbef2cc03c62096fc25c1f0196d0c7de23ebfaa3730001a

Reporting entity

Name: Rollstone Bank & Trust
norm: rollstone bank

Victim entity

Name: Rollstone Bank & Trust
norm: rollstone bank

Incident

Discovered: Aug 4, 2024
Materiality determined: Apr 28, 2025
Notification sent: Jul 17, 2025
Affected individuals: 1
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Third party: via Alera Group, Inc.
Initial access: supply_chain

Compliance

Time to disclose: 48 weeks(333 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.