DisclosureLens
HackingFinanceHacking OtherCustomer Data InvolvedIdentity (basic)Government IDHighResolved

American Bank Systems

bd_603cbd25a6d1ad77 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 16, 2020

Filed

Jan 21, 2021

To disclose

9 weeks

Affected · nationwide

17,0921 in this filing

Linked

4 filings

Confidence

50%
Full breach record for American Bank Systems →4 incidents on file

American Bank Systems, a commercial entity, experienced an external system breach (hacking) on October 22, 2020, which was discovered on November 16, 2020. The breach affected 17,092 individuals in total, including one resident of Maine. The compromised information included names or other personal identifiers in combination with Social Security Numbers. Affected individuals were notified in writing on January 21, 2021, and were offered 12 months of one-bureau credit monitoring services from TransUnion.

Maine clockDiscovered Nov 16, 2020 → Filed with AG Jan 21, 202166d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 25 days
discovery → filing · 9 weeks / 66 days

Oct 22, 2020

Begins

Nov 16, 2020

Discovered

Jan 21, 2021

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 3 states

View merged incident ↗
Montana State AGDec 4 · first
Maine State AG+12d
Massachusetts State AG+48d
Maine State AG+48d · this page

Pattern: first filing Dec 4 (MT), last Jan 21 (ME) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.