Lake City Bank
bd_55f74714e37789b1 · schema v1 · pii pii-v1
Full breach record for Lake City Bank →Lakeland Financial Corporation (parent of Lake City Bank) disclosed in its Q2 2023 earnings release that on June 30, 2023 it discovered it was the victim of international wire fraud resulting in an estimated $18.1 million loss ($13.6M net of tax). A sophisticated business email compromise by a foreign threat actor compromised a single employee email account outside the bank's network and used a forged wire transfer form targeting a specific general ledger account. Forensic investigation concluded no client accounts or data were accessed and the bank's network was not penetrated.
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/721994/000072199423000053/lkfn-2023721exhibit991.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jul 21, 2023
- Raw hash
- 1bafd96ee2dd3548de7ff2e1885c648a65abab82ec6785b95c6c95b180b90d89
Source filing
Reporting entity
- Name
- Lakeland Financial Corporationnorm: lakeland financial
- Domain
- lakelandfinancial.com
- Industry
- Banking
Victim entity
- Name
- Lake City Banknorm: lake city bank
- Domain
- lakecitybank.com
- Industry
- Banking
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jun 30, 2023
- Materiality determined
- —
- Notification sent
- Jun 30, 2023
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Phishing· foreign threat actor
- MITRE ATT&CK
- T1566 PhishingT1078 Valid AccountsT1114 Email Collection
- Threat actor
- Foreign threat actorExternalFinancial
- Regulator citations
- Notified the United States Secret ServiceNotified the FBINotified the Financial Crimes Enforcement Network (FinCEN)Communicated actively with its primary regulatorsNotified its insurance carriers
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.