HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Continental Bancorporation
bd_46c2d0f0a329cfc6 · schema v1 · pii pii-v1
Full breach record for Continental Bancorporation →Continental Bancorporation notified the NH Attorney General of a cybersecurity incident involving one New Hampshire resident. An unauthorized party exploited a vulnerability in CrushFTP server software to access the internal network. Personal information (name, SSN, account number, DOB) of one resident was accessed between March 31 and April 10, 2025. Continental contained the network, engaged forensic investigators, and offered credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_18515e5574ddd714Indiana State AGfiled 2025-08-04(4d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/continental-bancorporation-crushftp-20250808.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 8, 2025
- Raw hash
- 42d2bb116839391440c463c396b139d7ad2c8ba3e2ad71eb94ddd5e96113e096
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- Continental Bancorporationnorm: continental bancorporation
- Industry
- financial_services
Incident
- Discovered
- Apr 10, 2025
- Materiality determined
- —
- Notification sent
- Aug 4, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified the Office of the New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.