HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Heritage Bank of the Ozarks

bd_43bb4f8d6ea1a131 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Jan 6, 2025

To disclose

—

Affected

2state residents only

Confidence

66%

Full breach record for Heritage Bank of the Ozarks →2 incidents on file

Heritage Bank of the Ozarks reported unauthorized access to a single employee email account between October 28-29, 2024. The actor accessed the account using valid credentials. The incident affected 2 Nebraska residents, exposing names, Social Security numbers, and financial account numbers. Notifications were mailed on January 6, 2025, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 28, 2024

Begins

Jan 6, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Heritage Bank of the Ozarks
norm: heritage bank of the ozarks

Name: Heritage Bank of the Ozarks
norm: heritage bank of the ozarks
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 28, 2024 – Oct 29, 2024
Materiality determined: —
Notification sent: Jan 6, 2025
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure the account
Began an investigation
Reviewed the messages and attachments
Offering complimentary credit monitoring, fraud consultation, and identity theft restoration services through IDX
Changes made: Steps to enhance the security of its email environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/Heritage Bank_NE App & Sample.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 6, 2025
Raw hash: 264d3225f9e9f98ac47179cf21e7dd289daeb64214abda5d684a4f76b150d181

Reporting entityHeritage Bank of the Ozarks

Victim entityHeritage Bank of the Ozarks

IncidentUnauthorized Access

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov