MisuseFinancial ServicesFinancePrivilege AbuseCustomer Data InvolvedTargetedPIILowResolved
CITIZENS BANK
bd_41750a16bf5b818d · schema v1 · pii pii-v1
Full breach record for CITIZENS BANK →Citizens Bank (Johnston, RI) reported an insider wrongdoing incident to the Maine AG. An internal actor engaged in unauthorized activity between October 23, 2023 and July 16, 2024. The breach was discovered on October 23, 2024. Two Maine residents were among 8,358 total individuals affected. Notifications were sent on December 6, 2024. Affected individuals were offered 24 months of TransUnion TrueIdentity identity theft protection.
Maine clockDiscovered Oct 23, 2024 → Filed with AG Dec 10, 202448d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cb42421a472e479dLeak Siteeverestfiled 2026-04-20(496d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/add73b69-6932-4579-9659-eebc8a3f1cd1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2024
- Raw hash
- 3ed048ec86cde32eb771f0bc6fa8a349395650fea907cc62ad017daf2be42699
Reporting entity
- Name
- CITIZENS BANKnorm: citizens bank
- Domain
- citizensbank.com
- Industry
- Financial Services
Victim entity
- Name
- CITIZENS BANKnorm: citizens bank
- Domain
- citizensbank.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- Dec 6, 2024
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2024→ Filed with AG: Dec 10, 202448d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.