Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Village Bank
bd_66a00337aecb598a · schema v1 · pii pii-v1
Full breach record for Village Bank →Village Bank reported a phishing-based external system breach occurring on January 13, 2023, discovered on March 17, 2023. The incident affected 3,324 individuals, including one Maine resident. Compromised data included names and financial account or credit/debit card numbers. The bank provided written notification and offered one year of Equifax credit monitoring and identity theft restoration services.
Maine clockDiscovered Mar 17, 2023 → Filed with AG May 17, 202361d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,324 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1d44af9c-5c31-4fa7-87cd-8b96f06e6b99.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 17, 2023
- Raw hash
- d7e2fb5a4d6f9ceb1833c389628acb3a867d027bb9be3bda8c8ed09b42c7cf5c
Reporting entity
- Name
- Village Banknorm: village bank
- Industry
- Financial Services
Victim entity
- Name
- Village Banknorm: village bank
- Industry
- Financial Services
Incident
- Discovered
- Mar 17, 2023
- Materiality determined
- —
- Notification sent
- May 17, 2023
- Affected individuals
- 3,324
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- ME AG >30d · 61dME resident >60d · 61d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 17, 2023→ Filed with AG: May 17, 202361d 30 days (soft) ME AG >30d Maine Discovered: Mar 17, 2023→ Notified: May 17, 202361d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.