HackingFinancial ServicesFinanceData MishandlingSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)Government IDMediumContained

Umpqua Bank

bd_4e3a75d19b6c858b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 21, 2023

Filed

Aug 10, 2023

To disclose

7 weeks

Affected

756state residents only

Linked

24 records

Confidence

65%

Umpqua Bank notified customers that their names and Social Security numbers were accessed via a third-party vendor's exposure in the global MOVEit Transfer cybersecurity incident. The vendor, which provides technology services to Umpqua, was notified of the vulnerability on May 31, 2023, and of the potential access on June 21, 2023. Umpqua is offering 24 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 21 days

discovery → filing · 7 weeks / 50 days

May 31, 2023

Begins

Jun 21, 2023

Discovered

Aug 10, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 24 records about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

A leak claim by cl0p about this victim was first seen 41 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_51d45a1a8a5e2f6d2023-09-19 · +40dVerified by operator
Massachusetts State AGbd_ec926ee5ee55bfe72023-09-19 · +40dVerified by operator
Montana State AGbd_9d135722f356e9262023-09-28 · +49dVerified
Oregon State AGbd_c13bfda88a3242d42023-10-04 · +55dVerified

Show 6 more filings ↓up to 102d gap

California State AGbd_c92fcc25ac8a7c682023-10-04 · +55dVerified
Massachusetts State AGbd_d77a46d0383bceaa2023-10-04 · +55dVerified by operator
Massachusetts State AGbd_a9a8d5c26793cdfc2023-10-06 · +57dVerified by operator
California State AGbd_7d8643b052109cd42023-11-09 · +91dVerified by operator
Massachusetts State AGbd_e1c74fd96247ece32023-11-09 · +91dVerified by operator
Massachusetts State AGbd_c89fcdf92f5fe80d2023-11-20 · +102dVerified by operator

Showing first 10 of 23 linked disclosures.

Name: FIDELITY NATIONAL INFORMATION SERVICES, INC.
norm: fidelity national information
Domain: fisglobal.com

Name: Umpqua Bank
norm: umpqua bank
Domain: fisglobal.com
Industry: Financial Servicesllm

Discovered: Jun 21, 2023
Breach occurred: May 31, 2023
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 22, 2023
Affected individuals: 756state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: supply_chain

During the incident: Worked closely with the involved vendor
Provided 24 months of identity monitoring and theft resolution services
Launched an investigation into potential exposure among our third-party service providers
Vendor took steps to secure their environment
Vendor validated security using a third-party forensics firm
Changes made: Vendor implemented a software patch to remediate the issue
Offering complimentary 24-month membership to OnAlert identity monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 4 states

View merged incident ↗

Montana State AGAug 10 · first · this page

Massachusetts State AG+40d

Montana State AG+49d

Oregon State AG+55d

California State AG+55d

Massachusetts State AG+55d

Massachusetts State AG+57d

California State AG+91d

Massachusetts State AG+91d

Massachusetts State AG+102d

Pattern: first filing Aug 10 (MT), last Nov 20 (MA) — a 102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 23 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-540.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 10, 2023
Raw hash: 56fb77a409d96cd3a499891597bd45b08b26ca556fa59913f009aa139caa1426

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityFIDELITY NATIONAL INFORMATION SERVICES, INC.

Victim entityUmpqua Bank

Incidentdiscovered Jun 21, 2023

Stated responseWorked closely with the involved vendor

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov