LEAF Commercial Capital, Inc.

LEAF Commercial Capital, a subsidiary of People's United Bank, notified the New Hampshire Attorney General of a phishing incident affecting two NH residents. An employee clicked a phishing link on Oct 22, 2021, granting an external actor access to their email. The breach was detected on Oct 23, 2021, when suspicious login activity from Zambia triggered an alert. LEAF disabled the account and reset credentials. The incident involved Social Security Numbers and personal data of two NH residents. Affected individuals were notified and provided two years of credit monitoring via TransUnion.