HackingFinancial ServicesFinanceStolen CredentialsBECData ExfiltratedWire FraudCustomer Data InvolvedTargetedFINANCIAL_ACCOUNTPIILowResolved
Maple City Savings Bank, FSB
bd_6a2b19f5ac780de2 · schema v1 · pii pii-v1
Full breach record for Maple City Savings Bank, FSB →Maple City Savings Bank, FSB (MCSB) reported an unauthorized external actor accessed certain employee email accounts between April 12 and April 23, 2024. The likely purpose was to divert funds. Investigation completed August 7, 2024 confirmed that one Maine resident's name and financial account number may have been exposed. Written notification was mailed August 16, 2024. MCSB enhanced email security controls in response.
Maine clockDiscovered Aug 7, 2024 → Filed with AG Aug 16, 20249d ✓ ME AG ≤30d9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e7e08e3e408b8bb6New Hampshire State AGfiled 2024-08-16Verified
- bd_fb09eb28d59c3a1cVermont State AGfiled 2024-08-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/325160de-3d44-4f29-add7-440e68458f21.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- 8753b18b3ecf33912925a35af2c3c163edbd31ea93381c3488ad25ce614c58ac
Reporting entity
- Name
- Maple City Savings Bank, FSBnorm: maple city savings bank fsb
- Industry
- Financial Services
Victim entity
- Name
- Maple City Savings Bank, FSBnorm: maple city savings bank fsb
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Aug 7, 2024
- Materiality determined
- —
- Notification sent
- Aug 16, 2024
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported to Maine Attorney General per Me. Rev. Stat. Tit. 10, §1348
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 9d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 7, 2024→ Filed with AG: Aug 16, 20249d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.