HackingVulnerability ExploitSupply Chain (3P Vendor)TargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Enterprise Bank and Trust Company
bd_17e88d1c01569176 · schema v1 · pii pii-v1
Full breach record for Enterprise Bank and Trust Company →Enterprise Bank & Trust Company notified Vermont AG of a data breach involving Progress Software's MOVEit Transfer application. Unauthorized access occurred between May 27-31, 2023, exploiting a vulnerability in the third-party file transfer software. The incident compromised personal information including names and government IDs. The bank engaged in investigation, patched systems, and offered two years of identity monitoring to affected consumers.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_594a2a1f589990a5New Hampshire State AGfiled 2024-01-22Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-01-22-enterprise-bank-trust-company-progress-software-moveit-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 22, 2024
- Raw hash
- 0bcd7454f45d54d7ec2ecc804960fe319a18b30b30d066c695a66211254f27d2
Reporting entity
- Name
- Enterprise Bank and Trust Companynorm: enterprise bank and
Victim entity
- Name
- Enterprise Bank and Trust Companynorm: enterprise bank and
Incident
- Discovered
- May 27, 2023
- Materiality determined
- —
- Notification sent
- Jan 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- notified regulatory bodies as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 34 weeks(240 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.