HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTPIIHighContained
Triad Business Bank
bd_12ff39f360416748 · schema v1 · pii pii-v1
Full breach record for Triad Business Bank →Triad Business Bank reported an internal system breach on January 24, 2023, discovered on January 27, 2023. The incident compromised names and Social Security Numbers for 8,169 individuals, including 3 Maine residents. Written notification was sent on May 24, 2023. No identity theft protection services were offered. The breach was characterized as an internal system breach involving unauthorized access.
Maine clockDiscovered Jan 27, 2023 → Filed with AG May 24, 2023117d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_c4dc5f9b5f4696f1Montana State AGfiled 2023-05-24Verified
- bd_676abd788a2c7c55Maine State AGfiled 2023-05-09(15d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1a9cddec-c24b-4c4a-9d44-f11aab398f24.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2023
- Raw hash
- 43d521b68dc316ca89c40d92efb0e957e1d7171d7479d50cb0c0e207dc982bc1
Reporting entity
- Name
- Triad Business Banknorm: triad business bank
- Domain
- triadbusinessbank.com
- Industry
- Financial Services
Victim entity
- Name
- Triad Business Banknorm: triad business bank
- Domain
- triadbusinessbank.com
- Industry
- Financial Services
Incident
- Discovered
- Jan 27, 2023
- Materiality determined
- —
- Notification sent
- May 24, 2023
- Affected individuals
- 8,169
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(117 days from discovery to filing)
- Compliance flags
- ME AG >90d · 117dME resident >60d · 117d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 27, 2023→ Filed with AG: May 24, 2023117d 90 days ME AG >90d Maine Discovered: Jan 27, 2023→ Notified: May 24, 2023117d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.