HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Webster Bank, National Association
bd_519c51969ff5e987 · schema v1 · pii pii-v1
Full breach record for Webster Bank, National Association →Webster Bank, N.A. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred between November 27, 2022, and January 22, 2023. The breach was discovered on January 27, 2023. The compromised information includes names and Social Security numbers. The incident affected 22 Maine residents. Webster Bank offered 24 months of identity theft protection services through Experian to those affected.
Maine clockDiscovered Jan 27, 2023 → Filed with AG Apr 28, 202391d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_8b98ad645053816cNew Hampshire State AGfiled 2023-05-03(5d gap)Verified
- bd_b26f4a157e67d25bNew Hampshire State AGDaixinfiled 2023-04-12(16d gap)Verified
- bd_8dd6fb8c661b3b58Maine State AGfiled 2023-04-10(18d gap)Candidate
- bd_fd452c6f18b5b1e9Montana State AGfiled 2023-04-10(18d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7f2dc403-6290-497a-ae14-a3e00da877f6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2023
- Raw hash
- 7794942e8592c6cc85de6e5c7a686c52f239606532e9a313594aa9e83d019f5b
Reporting entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Victim entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Incident
- Discovered
- Jan 27, 2023
- Materiality determined
- —
- Notification sent
- Apr 28, 2023
- Affected individuals
- 22
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dME resident >60d · 91d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 27, 2023→ Filed with AG: Apr 28, 202391d 90 days ME AG >90d Maine Discovered: Jan 27, 2023→ Notified: Apr 28, 202391d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.