HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Enterprise Bank and Trust Company
bd_594a2a1f589990a5 · schema v1 · pii pii-v1
Full breach record for Enterprise Bank and Trust Company →Enterprise Bank & Trust Company reported a data breach involving MOVEit Transfer software exploited by unauthorized actors between May 27-31, 2023. The incident, discovered in early June 2023, resulted in the exfiltration of personal information including names and financial account details. Approximately 410 New Hampshire residents were notified on January 22, 2024. The bank engaged Fiserv, remediated vulnerabilities, and provided credit monitoring services via Kroll.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_17e88d1c01569176Vermont State AGfiled 2024-01-22Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/enterprise-bank-trust-company-20240122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 22, 2024
- Raw hash
- 44747709e20af502dac25771de89ad71e6ddd0a693a91c23cabf13b6509a7dac
Reporting entity
- Name
- Enterprise Bank and Trust Companynorm: enterprise bank and
Victim entity
- Name
- Enterprise Bank and Trust Companynorm: enterprise bank and
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Jan 22, 2024
- Affected individuals
- 410
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notified regulatory bodies as requiredproviding written notice of this event to relevant state regulators
- Third party
- via Fiserv
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 34 weeks(235 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.