Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsMediumActive

Northern State Bank

bd_48be94eae48f597c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 8, 2016

Filed

Mar 17, 2016

To disclose

5 weeks

Affected

6state residents only

Confidence

65%

Full breach record for Northern State Bank →2 incidents on file

Northern State Bank supplemental notice regarding unauthorized access to TransUnion credit reports via stolen employee credentials obtained through a phishing email. Incident occurred Feb 6-8, 2016; discovered Feb 8, 2016. Data included SSN, DOB, addresses, and financial info. Affected individuals offered 24 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 5 weeks / 38 days

Feb 6, 2016

Begins

Feb 8, 2016

Discovered

Mar 17, 2016

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

Name: Northern State Bank
norm: northern state bank

Name: Northern State Bank
norm: northern state bank
Industry: Financial Servicesllm

Discovered: Feb 8, 2016
Breach occurred: Feb 6, 2016 – Feb 8, 2016
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 25, 2016
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the FBIReported the incident to various state regulators
Initial access: phishing_link

During the incident: Began an investigation
Notified TransUnion
Hired third-party forensic vendors
Disabled credentials
Retained third-party forensic investigators
Reported the incident to TransUnion, Equifax, Experian, the FBI, and various state regulators
Providing notice of this incident
Providing complimentary access to 24 months of free credit monitoring and identity restoration services with AllClear ID
Changes made: Taken steps to prevent additional unauthorized access to our network
Continue to monitor our system for suspicious activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Northern-State-Bank-supplement.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2016
Raw hash: 3ac4a2071714af1d95bbb3451f9d003b6ca812084382aaa542c6826a6ddc7ffa

Reporting entityNorthern State Bank

Victim entityNorthern State Bank

Incidentdiscovered Feb 8, 2016

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov