HackingData MishandlingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
The Washington Trust Company, of Westerly
bd_2c9c1cdf869b9511 · schema v1 · pii pii-v1
Full breach record for The Washington Trust Company, of Westerly →The Washington Trust Company of Westerly notified the NH Attorney General of a data event involving its third-party marketing vendor, Marquis Software Solutions. Unauthorized access occurred on or about August 14, 2025, affecting customer data (names, DOB, SSN, financial accounts). 42 NH residents were notified on Dec 15, 2025; ~4,882 RI residents also impacted. Credit monitoring offered.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f4ca4a9f0a2e0e52Maine State AGfiled 2025-12-15Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/washington-trust-westerly-marquis-software-solutions-20251215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- 870405055ece5874baf62ba4b1d394c451326110d4d375effbcb1ca571a7c4f2
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- The Washington Trust Company, of Westerlynorm: the washington trust company of westerly
- Domain
- washtrust.co
Incident
- Discovered
- Oct 27, 2025
- Materiality determined
- —
- Notification sent
- Dec 15, 2025
- Affected individuals
- 4,882
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- Partner
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.