MalwareFinancial ServicesFinanceRansomwareData ExfiltratedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDFinancial accountMediumContained

Goldwater Bank, N.A.

bd_125ff3a001d24922 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 21, 2021

Filed

Oct 29, 2021

To disclose

23 weeks

Affected

762state residents only

Linked

5 filings

Confidence

69%

Full breach record for Goldwater Bank, N.A. →

Goldwater Bank, N.A. reported an attempted ransomware attack on May 21, 2021, affecting 762 Washington residents. Hackers accessed customer names, contact info, SSNs, and account numbers via an FTP server. The attack was contained, data was secured, and no misuse was found. Notifications began Sept 10, 2021, offering two years of IdentityForce protection.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d23 weeks discovery → filing

Incident timeline

discovery → filing · 23 weeks / 161 days

May 21, 2021

Begins

May 21, 2021

Discovered

Oct 29, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_622351252ee383612021-10-29Verified
Montana State AGbd_eb3a897d5c5088cd2021-10-29Verified
Massachusetts State AGbd_f7331b025a3d09502021-10-29Verified
Indiana State AGbd_4d62f4b45a829f6c2021-09-10 · +49dVerified

Name: Goldwater Bank, N.A.
norm: goldwater bank na

Name: Goldwater Bank, N.A.
norm: goldwater bank na
Industry: Financial Servicesllm

Discovered: May 21, 2021
Breach occurred: May 21, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 10, 2021
Affected individuals: 762state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Reported the event to its primary regulatorReported the event to the Federal Bureau of Investigation

During the incident: Reported the event to its primary regulator and the Federal Bureau of Investigation
Conducted thorough investigations to protect and minimize any financial impact to consumers
Identified an FTP server to which the compromised information was removed, and worked quickly to secure its removal
Worked diligently with law enforcement to identify and pursue the responsible parties
Arranged for a complimentary two-year membership in an identity privacy protection service provided by IdentityForce
Notifying all affected individuals in Washington of the data breach incident by written letter through first-class mail
Changes made: Continued to work with its IT professionals to thoroughly evaluate its existing cybersecurity infrastructure and processes
Working to strengthen safeguards to minimize the risk of future breaches
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 10 · first

California State AG+49d

Montana State AG+49d

Massachusetts State AG+49d

Washington State AG+49d · this page

Pattern: first filing Sep 10 (IN), last Oct 29 (WA) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA3156.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 29, 2021
Raw hash: 1cc80ba3f5c158635c670d27f8f155f4f68979e6615b17b4a047f5e3f199a63e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityGoldwater Bank, N.A.

Victim entityGoldwater Bank, N.A.

Incidentdiscovered May 21, 2021

Stated responseReported the event to its primary regulator and the Federal Bureau of Investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com