HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Artisans' Bank
bd_5b0f74c39e7a94df · schema v1 · pii pii-v1
Full breach record for Artisans' Bank →Artisans' Bank notified the Maine AG that a third-party vendor, Marquis Software Solutions, suffered an unauthorized access incident beginning on or about August 14, 2025. Artisans' learned of the breach on approximately October 28, 2025. Compromised information includes customer names and Social Security numbers. Seven Maine residents were affected out of 32,344 total. Written notifications were sent December 23, 2025. IDX credit monitoring (12 months) was offered at no cost.
Maine clockDiscovered Oct 28, 2025 → Filed with AG Dec 23, 202556d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_dc44dcc822fb6cf4Vermont State AGfiled 2025-12-23Verified
- bd_f6b46bd1d66115d0Indiana State AGfiled 2025-12-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a29d7339-3d2f-45ad-ac42-c397e318d21f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2025
- Raw hash
- 1760fd1309a714e0e56d0cc28c18a7559cf6d67a762a575a1b8d3300615d8435
Reporting entity
- Name
- Artisans' Banknorm: artisans bank
- Domain
- artisansbank.com
- Industry
- Financial Services
Victim entity
- Name
- Artisans' Banknorm: artisans bank
- Domain
- artisansbank.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Oct 28, 2025
- Materiality determined
- —
- Notification sent
- Dec 23, 2025
- Affected individuals
- 7
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Maine Attorney General notificationRelevant state regulators notified
- Third party
- via Marquis Software Solutions
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 28, 2025→ Filed with AG: Dec 23, 202556d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.