DisclosureLens
HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)Financial accountCVE-2023-34362LowContained

Rockland Trust Company

bd_649f37004cf365dc · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 13, 2023

Filed

Jul 14, 2023

To disclose

4 weeks

Affected

1state residents only

Linked

9 filings

Confidence

64%
Full breach record for Rockland Trust Company →269 incidents on file

Rockland Trust Company notified customers of a data breach involving a third-party vendor (Progress Software) that processes bill pay transactions. The vendor's MOVEit Transfer application was exploited via a known vulnerability (May 27-31, 2023). Rockland learned of the incident on June 13, 2023. Affected data included names, addresses, account numbers, emails, and payment details. The vendor contained the issue and remediated the vulnerability. Rockland is offering two years of Experian IdentityWorks.

Incident timeline

undetected · 17 days
discovery → filing · 4 weeks / 31 days

May 27, 2023

Begins

Jun 13, 2023

Discovered

Jul 14, 2023

Filed

vs. sector median

6 wks faster

This filing is one of 9 filings about the same incident.View merged incident
Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 13d gap

Filing propagation · 9 filings · 4 states

View merged incident ↗

Pattern: first filing Jul 10 (VT), last Jul 27 (MA) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.