HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsAuthenticationMediumContained

Skagit Bank

bd_1bfed5130a8862f8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 12, 2018

Filed

Sep 12, 2018

To disclose

13 weeks

Affected

519state residents only

Confidence

70%

Skagit Bank notified Washington AG of unauthorized access to an employee email account on June 12, 2018. The incident potentially affected 519 Washington residents, exposing PII including SSNs, driver's licenses, and bank account details. Skagit engaged forensic investigators, reset passwords, enabled MFA, and reported the incident to the FBI IC3.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 92 days

Jun 12, 2018

Begins

Jun 12, 2018

Discovered

Sep 12, 2018

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed519 affectedView incident

Name: Skagit Bancorp Inc.
norm: skagit bancorp

Name: Skagit Bank
norm: skagit bank
Industry: Financial Servicesllm

Discovered: Jun 12, 2018
Breach occurred: Jun 12, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 12, 2018
Affected individuals: 519state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentialsAuthentication
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthUsername + password
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported to the FBI’s Internet Crime Complaint Center
Initial access: valid_credentials

During the incident: Undertook an immediate internal investigation
Retained an independent third party forensic firm to also investigate the incident
Instituted password resets on all email accounts across their enterprise
Enabled Multi Factor Authentication (MFA) for access to all email accounts
Notifying the affected Washington residents via the attached letter
Reported to the FBI’s Internet Crime Complaint Center
Changes made: Enabled Multi Factor Authentication (MFA) for access to all email accounts
Offered free credit and identity and credit monitoring for twelve (12) months through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10579.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2018
Raw hash: fa016c82a14f61681581a94661e69eb9e1b7ef608d1793ba6742f35189487a8f

Reporting entitySkagit Bancorp Inc.

Victim entitySkagit Bank

Incidentdiscovered Jun 12, 2018

Stated responseUndertook an immediate internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com