HackingFinancial ServicesTechnologyFinanceStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedFinancial accountIdentity (basic)LowContained

Hills Bank and Trust Company

bd_28ac9dac3a61c11a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 1, 2020

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Hills Bank and Trust Company →

Technology Management Resources, Inc. notified Hills Bank and Trust Company customers that an unauthorized person accessed check images deposited between June 1 and July 1, 2020. The incident involved viewing of names, checking account, and routing numbers. Notification was sent on August 14, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 1, 2020

Begins

Oct 1, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Technology Management Resources
norm: technology management resources
Domain: ask4tmr.com

Name: Hills Bank and Trust Company
norm: hills bank and
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: Jun 1, 2020 – Jul 1, 2020
Materiality determined: —
Notification sent: Aug 14, 2020
Affected individuals: 1state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Conducted an investigation into an incident in which an unauthorized person accessed check images
Investigation was conducted with the assistance of a professional forensic firm
Identified a subset of check images which may have been viewed by the unauthorized person
Notified our banking client that works with Hills Bank of the incident
Provided the banking client with a list of individuals whose information may have been involved in the incident
Changes made: Taken many precautions to safeguard the data in our system
Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2020
Raw hash: bd51e0eb1f809bc4a231bb16d2554c700153a695b64546206bf7150706b9fd49

Reporting entityTechnology Management Resources

Victim entityHills Bank and Trust Company

IncidentUnauthorized Access

Stated responseConducted an investigation into an incident in which an unauthorized person accessed check images

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov