DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

Williamsville State Bank & Trust

bd_1e7739be0af27be3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 24, 2024

Filed

Apr 21, 2025

To disclose

Affected

Not disclosed

Linked

2 filings

Confidence

66%
Full breach record for Williamsville State Bank & Trust

Williamsville State Bank and Trust notified affected individuals on April 21, 2025, regarding a security breach of its cloud-based email platform. Unauthorized access occurred starting around October 16, 2024, when a bad actor leveraged administrator credentials to access employee email accounts. The incident was discovered on December 24, 2024, and security was restored by December 27, 2024. Accessed data included names, account numbers, credit/debit card numbers, SSNs, driver's license numbers, dates of birth, and physical addresses. The bank implemented additional security measures and notified regulatory and law enforcement authorities.

Incident timeline

undetected · 69 days

Oct 16, 2024

Begins

Dec 24, 2024

Discovered

Apr 21, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Illinois State AGApr 1 · first
Nebraska State AG+20d · this page

Pattern: first filing Apr 1 (IL), last Apr 21 (NE) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.