HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
FIRST FED BANK
bd_567adb402af5a684 · schema v1 · pii pii-v1
Full breach record for FIRST FED BANK →First Fed Bank reported a data breach that occurred through a third-party vendor, Darling Consulting Group, due to the MOVEit vulnerability. The breach happened between May 30 and May 31, 2023, and was discovered on July 12, 2023. It affected 6 Maine residents, compromising their names and Social Security numbers. First Fed Bank began notifying the affected individuals on August 23, 2023, and offered them 12 months of identity protection services through Experian.
Maine clockDiscovered Jul 12, 2023 → Filed with AG Aug 23, 202342d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bb5757e4df6a4d55Montana State AGfiled 2023-08-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/90c499d6-6d02-422d-8e45-3afaf9ef021f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- e4a7c879145b20d8d7883b802b839be559570f9991447213242386266d39bcb7
Reporting entity
- Name
- FIRST FED BANKnorm: first fed bank
- Industry
- Financial Services
Victim entity
- Name
- FIRST FED BANKnorm: first fed bank
- Industry
- Financial Services
Incident
- Discovered
- Jul 12, 2023
- Materiality determined
- —
- Notification sent
- Aug 23, 2023
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 12, 2023→ Filed with AG: Aug 23, 202342d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.