HackingFinancial ServicesFinanceVulnerability ExploitCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountMediumResolved

Rockland Trust Company

bd_6a20876f29df4b40 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 13, 2023

Filed

Jul 11, 2023

To disclose

28 days

Affected · nationwide

14,80627 in this filing

Linked

9 filings

Confidence

50%

Full breach record for Rockland Trust Company →269 incidents on file

Rockland Trust, a financial services company, reported a data breach affecting 27 Maine residents. The breach, which occurred on May 31, 2023, and was discovered on June 13, 2023, was the result of an external system hack. The compromised information includes names and financial account numbers with access codes. Affected individuals were notified on July 10, 2023, and offered 24 months of identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 13, 2023 → Filed with AG Jul 11, 202328d ✓ ME AG ≤30d28 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 13 days

discovery → filing · 28 days

May 31, 2023

Begins

Jun 13, 2023

Discovered

Jul 11, 2023

Filed

vs. sector median

6 wks faster

This filing is one of 9 filings about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Vermont State AGbd_3139885a81b4bbc92023-07-10 · +1dVerified
Montana State AGbd_649f37004cf365dc2023-07-14 · +3dVerified
Massachusetts State AGbd_6f0a50bccc65a9c12023-07-14 · +3dVerified
Maine State AGbd_ade58be497710be12023-07-25 · +14dVerified by operator

Show 4 more filings ↓up to 16d gap

Massachusetts State AGbd_6e2af4edcce75a372023-07-27 · +16dVerified
Massachusetts State AGbd_c7774925fb9ca4b72023-07-27 · +16dCandidate
Massachusetts State AGbd_caee4525e765ef582023-07-27 · +16dCandidate
Massachusetts State AGbd_ccc21ac021e5fee32023-07-27 · +16dCandidate

Name: Rockland Trust Company
norm: rockland trust
Domain: rocklandtrust.com

Name: Rockland Trust Company
norm: rockland trust
Domain: rocklandtrust.com
Industry: Financial Servicesllm

Discovered: Jun 13, 2023
Breach occurred: May 31, 2023
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2023
Affected individuals: 14,806state + nationwide
Data types: Identity (basic)Financial account
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: ExternalFinancial

Changes made: Offered 24 months of credit monitoring services through Experian.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: ME AG ≤30d · 28d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 13, 2023
→ Filed with AG: Jul 11, 2023
28d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 13, 2023 → Filed with AG: Jul 11, 2023	28d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 4 states

View merged incident ↗

Vermont State AGJul 10 · first

Maine State AG+1d · this page

Montana State AG+4d

Massachusetts State AG+4d

Maine State AG+15d

Massachusetts State AG+17d

Pattern: first filing Jul 10 (VT), last Jul 27 (MA) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/84849ad9-1851-45a3-9e0d-3144ca7407fe.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2023
Raw hash: cfd7ed02808515fe7f7c7262a9fcdf4a4e8003d8e8cda35c33b1d19f39433018

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityRockland Trust Company

Victim entityRockland Trust Company

Incidentdiscovered Jun 13, 2023

Stated responseOffered 24 months of credit monitoring services through Experian.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov