Social EngineeringFinancial ServicesFinancePhishingTargetedIdentity (basic)Financial accountLowContained

Wheaton Bank & Trust Company

bd_4ae56625f28e5133 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 22, 2018

Filed

Sep 28, 2018

To disclose

5 weeks

Affected

10state residents only

Linked

2 filings

Confidence

65%

Wheaton Bank & Trust Company (subsidiary of Wintrust Financial) notified Montana residents of a phishing attack on an employee email account on August 22, 2018. Accessible data included names and financial account numbers. No SSNs or passwords were impacted. The bank locked the account, conducted forensic investigation, and provided 24 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 37 days

Aug 22, 2018

Begins

Aug 22, 2018

Discovered

Sep 28, 2018

Filed

vs. sector median

3 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3dd5b5b3a9b169562018-10-01 · +3dVerified

Name: WINTRUST FINANCIAL CORPORATION
norm: wintrust financial

Name: Wheaton Bank & Trust Company
norm: wheaton bank trust
Industry: Financial Servicesllm

Discovered: Aug 22, 2018
Breach occurred: Aug 22, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2018
Affected individuals: 10state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took immediate action to lock down the impacted email account
Investigate the incident
Confirmed that no other WBT systems were affected
Conducted a forensic investigation
Arranged to have AllClear ID protect your identity for twenty four months at no cost
Changes made: Continue to provide regular reminders and training for employees on how to spot and avoid being victimized by phishing emails in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGSep 28 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Wintrust-Financial-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2018
Raw hash: 2f0c1f13b40a3426ced59b4afef26c79b84028f42434c1d0c57ea443a44e2a65

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWINTRUST FINANCIAL CORPORATION

Victim entityWheaton Bank & Trust Company

Incidentdiscovered Aug 22, 2018

Stated responseTook immediate action to lock down the impacted email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov