MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDFinancial accountMediumContained

Tri Counties Bank

bd_3d1dd695dbfc9eb9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2023

Filed

Nov 22, 2023

To disclose

41 weeks

Affected

Not disclosed

Linked

11 records

Confidence

65%

Full breach record for Tri Counties Bank →

Tri Counties Bank experienced a malware incident between February 7-8, 2023, where an unauthorized actor accessed systems storing personal information. The malware prevented access to certain files. The bank shut down systems, launched an investigation with third-party specialists, and notified law enforcement and regulators. Personal information including names, addresses, SSNs, and financial data of customers and employees was potentially compromised. Credit monitoring and identity restoration services are being provided.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d41 weeks discovery → filing

Incident timeline

discovery → filing · 41 weeks / 288 days

Feb 7, 2023

Begins

Feb 7, 2023

Discovered

Nov 22, 2023

Filed

vs. sector median

+33 wks slower

This filing is one of 11 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 248 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_8a1c05db9a0376c62023-03-19 · +247dVerified by operator

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_0119439d398a4f922023-11-22Verified
California State AGbd_9d8a5b82fc79f5002023-11-22Verified by operator
Vermont State AGbd_af220720d4d002912023-11-22Verified by operator
SEC 8-Kbd_1297d2dd698bf7122023-10-13 · +40dCandidate

Show 5 more filings ↓up to 41d gap

Maine State AGbd_201ae7fa1e3c8a632023-10-12 · +41dVerified by operator
Montana State AGbd_3f1547cf3ba03ec12023-10-12 · +41dVerified by operator
Indiana State AGbd_459843a2f6e73e1c2023-10-12 · +41dVerified
Massachusetts State AGbd_c631857751f1f3bd2023-10-12 · +41dVerified by operator
California State AGbd_f2b2a26ac629eb7b2023-10-12 · +41dCandidate

Name: Tri Counties Bank
norm: tri counties bank
Domain: tcbk.com

Name: Tri Counties Bank
norm: tri counties bank
Domain: tcbk.com
Industry: Financial Servicesllm

Discovered: Feb 7, 2023
Breach occurred: Feb 7, 2023 – Feb 8, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcementNotified applicable regulatory authoritiesNotified the three major credit reporting agencies

During the incident: Shut down networked systems
Launched an investigation with the assistance of third-party cyber security specialists
Notified law enforcement
Notified applicable regulatory authorities
Notified the three major credit reporting agencies, Equifax, Experian, and TransUnion
Providing access to credit monitoring services through Experian at no cost
Providing impacted individuals with identity restoration and guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(288 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 7 states

View merged incident ↗

Maine State AGOct 12 · first

Montana State AGOct 12 · first

Indiana State AGOct 12 · first

Massachusetts State AGOct 12 · first

California State AGOct 12 · first

SEC 8-K+1d

Maine State AG+41d

California State AG+41d

Vermont State AG+41d

New Hampshire State AG+41d · this page

Pattern: first filing Oct 12 (ME), last Nov 22 (NH) — a 41-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tri-counties-bank-20231122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2023
Raw hash: 5e9f185bb0df07a0fcf1cafdf0e24d52e5010c3fb8b5d714ee480895ea633c7e

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityTri Counties Bank

Victim entityTri Counties Bank

Incidentdiscovered Feb 7, 2023

Stated responseShut down networked systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov