Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

TBK BANK, SSB

bd_183b49eabe1f88ec · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 17, 2022

To disclose

—

Affected

26state residents only

Linked

6 filings

Confidence

66%

Full breach record for TBK BANK, SSB →3 incidents on file

CorrectionPublished Sep 26, 2026

Correction: we date this filing March 17, 2022, not 3/17/2021 as the Montana Department of Justice's breach register prints it. That date is earlier than the start of the breach the same register row reports (12/1/2021), and the Massachusetts, New Hampshire and Maine breach registers list this notice on March 17, 2022.

Read their full statement

TBK Bank, SSB notified customers of unauthorized access to an employee's email account between Dec 1-6, 2021. The attacker likely viewed emails containing names, SSNs, driver's licenses, or passport numbers. The bank engaged a cybersecurity firm, secured the account, and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 1, 2021

Begins

Mar 17, 2022

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_4a71625747df74b72022-03-17Verified
New Hampshire State AGbd_ac84f0a3900ba68a2022-03-17Verified
Maine State AGbd_b6e46bd16d6a69612022-03-17Verified
Indiana State AGbd_55cfba2c995c58152022-03-16 · +1dVerified

Show 1 more filing ↓up to 75d gap

Illinois State AGbd_3104649bc7b7ddac2022-01-01 · +75dVerified

Name: TBK BANK, SSB
norm: tbk bank ssb

Name: TBK BANK, SSB
norm: tbk bank ssb
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Dec 1, 2021 – Dec 6, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 26state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Launched an investigation
Took steps to secure the email account
A cybersecurity firm was engaged
Terminated access
Conducted a review of the emails and attachments
Offering you a free one-year membership in Experian’s® IdentityWorksSM Credit 3B
Changes made: Implemented additional measures to enhance our existing security protocols
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+74d

Massachusetts State AG+75d

New Hampshire State AG+75d

Maine State AG+75d

Montana State AG+75d · this page

Pattern: first filing Jan 1 (IL), last Mar 17 (MT) — a 75-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/TBK-Bank-SSB-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2022
Raw hash: 7279a778a22d8c4ebd09d2dea34b3d283020861199dab28b5a86dd99c243d334

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTBK BANK, SSB

Victim entityTBK BANK, SSB

IncidentPhishing

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov