HackingFinancial ServicesFinanceVulnerability ExploitZero-DayData ExfiltratedSupply Chain (3P Vendor)Financial accountIdentity (basic)LowContained

Centennial Bank

bd_3b690be2ea3deb94 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 1, 2023

Filed

Jan 2, 2024

To disclose

31 weeks

Affected

10state residents only

Confidence

66%

Full breach record for Centennial Bank →2 incidents on file

First National Bankers’ Bank notified Centennial Bank customers of a data breach involving the MOVEit Transfer vulnerability. Unauthorized access occurred on May 27, 2023, exposing check images and account numbers. FNBB applied patches, engaged forensic experts, and notified law enforcement. Credit monitoring is offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 31 weeks / 215 days

May 27, 2023

Begins

Jun 1, 2023

Discovered

Jan 2, 2024

Filed

vs. sector median

+22 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10 affectedView incident

Name: First National Bankers Bank
norm: first national bankers bank
Domain: bankers-bank.com

Name: Centennial Bank
norm: centennial bank
Industry: Financial Servicesllm

Discovered: Jun 1, 2023
Breach occurred: May 27, 2023
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 10state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementNotified federal regulators
Initial access: exploit_public_facing

During the incident: Swiftly applying 3 software patches provided by Progress Software
Opening an investigation into that matter
Notified law enforcement
Hired data forensic experts to assist in investigation
Notified federal regulators
Arranged with Kroll to provide credit monitoring for one year
Changes made: Applying 3 software patches provided by Progress Software
Reviewing and updating security policies and incident response plans
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(215 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-999.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 2, 2024
Raw hash: c0d00d4bd5246226dc1623150827aa098e97acf1c9f212dab7a859b22f24674f

Reporting entityFirst National Bankers Bank

Victim entityCentennial Bank

Incidentdiscovered Jun 1, 2023

Stated responseSwiftly applying 3 software patches provided by Progress Software

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov