Social EngineeringFinancial ServicesFinancePhishingTargetedIdentity (basic)Government IDFinancial accountMediumContained

The Federal Savings Bank

bd_62c67b50e93f7c98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 7, 2017

To disclose

—

Affected

4state residents only

Linked

3 filings

Confidence

67%

Full breach record for The Federal Savings Bank →5 incidents on file

The Federal Savings Bank notified Montana residents that an employee email account was hacked and used to send phishing emails. Personal information including names, SSNs, driver's licenses, and financial account numbers was stored in the account. No evidence of misuse was found. The bank engaged forensic experts, notified law enforcement, enhanced email security, provided employee training, and offered one year of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 7, 2017

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_410b5629d37825852017-02-13 · +6dCandidate
Massachusetts State AGbd_78d446acd05d3b672016-12-28 · +41dCandidate

Name: The Federal Savings Bank
norm: the federal savings bank

Name: The Federal Savings Bank
norm: the federal savings bank
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Feb 8, 2017
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Alerted federal law enforcement concerning this incident
Initial access: phishing_link

During the incident: Isolated the e-mail account
Stopped the phishing e-mails
Locked out the hacker
Conducted a thorough investigation of the incident with the assistance of an outside computer forensic expert
Alerted federal law enforcement concerning this incident
Offering one year of credit monitoring at no cost
Changes made: Conducted a thorough review of our e-mail system security
Taken steps to enhance that security to prevent a recurrence
Provided additional training to employees to enhance their ability to identify potential hacking activity and to respond promptly to it
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 28 · first

Montana State AG+41d · this page

Massachusetts State AG+47d

Pattern: first filing Dec 28 (MA), last Feb 13 (MA) — a 47-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/The-Federal-Savings-Bank-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2017
Raw hash: 16be606f24955d1a1ec1d3222db45ee4dbb2bfa3056f23a9261b78bf33799383

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe Federal Savings Bank

Victim entityThe Federal Savings Bank

IncidentPhishing

Stated responseIsolated the e-mail account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov