HackingFinancial ServicesFinanceMediumResolved

First Sonora Bancshares, Inc.

bd_35c087085ed6cfe1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 25, 2020

Filed

Nov 20, 2020

To disclose

8 weeks

Affected · nationwide

10,5513 in this filing

Linked

4 filings

Confidence

63%

Full breach record for First Sonora Bancshares, Inc. →

First Sonora Bancshares, Inc. (Sonora Bank) reported an external system breach (hacking) that affected 10,551 individuals. The incident occurred on June 1, 2020, and was discovered on September 25, 2020. Notifications were sent on November 17, 2020. The notification did not specify the types of personal information that were acquired.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 25, 2020 → Filed with AG Nov 20, 202056d ⏱ ME AG >30d8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 116 days

discovery → filing · 8 weeks / 56 days

Jun 1, 2020

Begins

Sep 25, 2020

Discovered

Nov 20, 2020

Filed

vs. sector median

on median

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_bb65458ed08e89ad2020-11-20Verified
Oregon State AGbd_40c27632f1156bae2020-11-21 · +1dVerified
Indiana State AGbd_bd644d13f8f0ad2c2020-11-17 · +3dVerified

Name: First Sonora Bancshares, Inc.
norm: first sonora bancshares

Name: First Sonora Bancshares, Inc.
norm: first sonora bancshares
Industry: Financial Servicesllm

Discovered: Sep 25, 2020
Breach occurred: Jun 1, 2020
Undetected for: 116 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 17, 2020
Affected individuals: 10,551state + nationwide
Data types: —
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Sent written notification to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: ME AG >30d · 56d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 25, 2020
→ Filed with AG: Nov 20, 2020
56d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 25, 2020 → Filed with AG: Nov 20, 2020	56d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGNov 17 · first

Massachusetts State AG+3d

Maine State AG+3d · this page

Oregon State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d951378d-2c2a-47d0-a8f8-74bd124d14b4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2020
Raw hash: d8eb41e7e18c1f30d44c53732247bcc8a52ade9fb9bd227f9b69e4ceff369c67

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFirst Sonora Bancshares, Inc.

Victim entityFirst Sonora Bancshares, Inc.

Incidentdiscovered Sep 25, 2020

Stated responseSent written notification to affected individuals

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov