Social EngineeringPhishingBECCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
CNB Bank
bd_258e1c7ecb2dda86 · schema v1 · pii pii-v1
Full breach record for CNB Bank →CNB Bank experienced a data breach impacting one Maine resident. The breach, which occurred from November 20, 2020, to December 2, 2020, was the result of a business email compromise stemming from a phishing email. The compromised information included names and Social Security numbers. The breach was discovered on December 3, 2020, and affected consumers were notified on April 13, 2021. The bank offered 12 months of credit monitoring and identity theft recovery services through a third-party provider.
Maine clockDiscovered Dec 3, 2020 → Filed with AG Apr 13, 2021131d ✗ ME AG >90d19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/64361db1-bac7-4d33-be6d-5d69b681b510.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2021
- Raw hash
- 5e1cbd84af98a4488c022c0b2c705129857cd1ac966aba6d4c30c57e224711e9
Reporting entity
- Name
- CNB Banknorm: cnb bank
Victim entity
- Name
- CNB Banknorm: cnb bank
Incident
- Discovered
- Dec 3, 2020
- Materiality determined
- —
- Notification sent
- Apr 13, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 19 weeks(131 days from discovery to filing)
- Compliance flags
- ME AG >90d · 131dME resident >60d · 131d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 3, 2020→ Filed with AG: Apr 13, 2021131d 90 days ME AG >90d Maine Discovered: Dec 3, 2020→ Notified: Apr 13, 2021131d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.