Tri Counties Bank
bd_1297d2dd698bf712 · schema v1 · pii pii-v1
Full breach record for Tri Counties Bank →Tri Counties Bank, a subsidiary of TriCo Bancshares, experienced a cybersecurity incident in February 2023 involving malware that prevented access to certain files on its internal network. The Bank took systems offline, engaged forensic investigators, and notified law enforcement and banking regulators. Its investigation determined that between February 7 and February 8, 2023 an unauthorized actor may have had access to systems storing sensitive customer and employee information, including Social Security numbers, financial account information and medical information. The Bank restored access to its internal systems after approximately one week, and potentially impacted individuals will be notified and offered 24 months of Experian IdentityWorks credit monitoring and credit restoration services at no cost.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 7, 2023
Begins
Feb 7, 2023
Discovered
Oct 13, 2023
Filed
vs. sector median
+27 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteblack_bastabd_8a1c05db9a0376c62023-03-19 · +207dVerified by operator
Regulatory filings (9) · sorted by filing gap
- Maine State AGbd_201ae7fa1e3c8a632023-10-12 · +1dVerified by operator
- Montana State AGbd_3f1547cf3ba03ec12023-10-12 · +1dVerified by operator
- Indiana State AGbd_459843a2f6e73e1c2023-10-12 · +1dVerified
- Massachusetts State AGbd_c631857751f1f3bd2023-10-12 · +1dVerified by operator
Show 5 more filings ↓Show fewer ↑up to 40d gap
- California State AGbd_f2b2a26ac629eb7b2023-10-12 · +1dCandidate
- Maine State AGbd_0119439d398a4f922023-11-22 · +40dVerified
- New Hampshire State AGbd_3d1dd695dbfc9eb92023-11-22 · +40dVerified by operator
- California State AGbd_9d8a5b82fc79f5002023-11-22 · +40dVerified by operator
- Vermont State AGbd_af220720d4d002912023-11-22 · +40dVerified by operator
Filing propagation · 10 filings · 7 states
View merged incident ↗Pattern: first filing Oct 12 (ME), last Nov 22 (VT) — a 41-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.