HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
NorthEast Community Bank
bd_654139c05fa0fa85 · schema v1 · pii pii-v1
Full breach record for NorthEast Community Bank →NorthEast Community Bank reported a data breach affecting 11,477 individuals, which occurred at its third-party vendor, Fidelity National Information Services, Inc. (FIS). The incident, which took place on May 27, 2023, and was discovered on June 26, 2023, resulted in the unauthorized access to names and financial account numbers. This breach is associated with the widespread MOVEit transfer software vulnerability exploitation. Affected individuals were notified on September 26, 2023, and offered 24 months of credit monitoring services.
Maine clockDiscovered Jun 26, 2023 → Filed with AG Sep 26, 202392d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11,477 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f0ca733a-c8bd-4e62-a843-fbd1996af342.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2023
- Raw hash
- 2d15052bf6c3d8198b8821cc0ad0bebf42bdb11383fb1569de24f1251838fe6e
Reporting entity
- Name
- NorthEast Community Banknorm: northeast community bank
Victim entity
- Name
- NorthEast Community Banknorm: northeast community bank
Incident
- Discovered
- Jun 26, 2023
- Materiality determined
- —
- Notification sent
- Sep 26, 2023
- Affected individuals
- 11,477
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- ME AG >90d · 92dME resident >60d · 92d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 26, 2023→ Filed with AG: Sep 26, 202392d 90 days ME AG >90d Maine Discovered: Jun 26, 2023→ Notified: Sep 26, 202392d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.