HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Mauch Chunk Trust Company
bd_2dc3397652bb9454 · schema v1 · pii pii-v1
Full breach record for Mauch Chunk Trust Company →Mauch Chunk Trust Company (MCT) notified the NH AG of a data security incident involving third-party vendor Darling Consulting. Files pertaining to MCT were downloaded by an unauthorized actor on May 30, 2023, via the MOVEit vulnerability. MCT learned of the incident on July 12, 2023. 10 New Hampshire residents were notified on August 18, 2023. Impacted data included personal information. No evidence of misuse was found. MCT offered credit monitoring services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_17cbea2d58dda3dbMontana State AGfiled 2023-08-22Candidate
- bd_f064dcba4c94b125Maine State AGfiled 2023-08-22Verified
- bd_c927018e326a7542Vermont State AGfiled 2023-08-18(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mauch-chunk-trust-company-20230822.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 22, 2023
- Raw hash
- 157d66fd86efbc063ec740a1dd7e45633b553c9eb7c92d0613a4fc17838ef9f6
Reporting entity
- Name
- Mauch Chunk Trust Companynorm: mauch chunk
- Domain
- mct.bank
Victim entity
- Name
- Mauch Chunk Trust Companynorm: mauch chunk
- Domain
- mct.bank
Incident
- Discovered
- Jul 12, 2023
- Materiality determined
- Aug 1, 2023
- Notification sent
- Aug 18, 2023
- Affected individuals
- 10
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Third party
- via Darling Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.