HackingCustomer Data InvolvedLow
Merchants Bank
bd_64d7fccf9a800b81 · schema v1 · pii pii-v1
Full breach record for Merchants Bank →Merchants Bank, a financial services company, reported a data breach to the Maine Attorney General. The breach, which occurred on September 11, 2024, was an external system breach (hacking) and was discovered on February 24, 2025. The breach affected 2 Maine residents. The company began notifying affected consumers in writing on March 25, 2025, and offered 12 months of identity theft and credit monitoring services through Experian.
Maine clockDiscovered Feb 24, 2025 → Filed with AG Mar 25, 202529d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8bb580c5-57f5-4a72-acc6-bd8f49a4a23d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- 19d18276748bcdf75bba072481e94dde4413c8358ed0404fbf7e52f7a6a58d74
Reporting entity
- Name
- Merchants Banknorm: merchants bank
Victim entity
- Name
- Merchants Banknorm: merchants bank
- Industry
- Financial Services
Incident
- Discovered
- Feb 24, 2025
- Materiality determined
- —
- Notification sent
- Mar 25, 2025
- Affected individuals
- 2
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 24, 2025→ Filed with AG: Mar 25, 202529d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.