HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)PIILowContained

Equity Bank

bd_6f2ea3f208b0f983 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2021

Filed

Dec 30, 2021

To disclose

8 weeks

Affected

37state residents only

Linked

5 filings

Confidence

66%

Equity Bank notified customers of a security incident where a third party obtained limited personal information (name, address) for a portion of customers. Access occurred on Nov 1, 2021; discovered Nov 2, 2021. No core banking data was involved. Kroll identity monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 8 weeks / 58 days

Nov 1, 2021

Begins

Nov 2, 2021

Discovered

Dec 30, 2021

Filed

vs. sector median

on median

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_1a4e3a3b479381a62021-12-30Verified
Indiana State AGbd_34e9b01197b878142021-12-30Verified
Maine State AGbd_db6e6de97542a3d42021-12-30Candidate
New Hampshire State AGbd_11ae2392e0f494842022-01-04 · +5dVerified

Name: EQUITY BANCSHARES, INC.
norm: equity bancshares

Name: Equity Bank
norm: equity bank
Industry: Financial Servicesllm

Discovered: Nov 2, 2021
Breach occurred: Nov 1, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 10, 2021
Affected individuals: 37state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to resolve the disruption
Eliminated the third-party’s access
Restored system usage
Investigated the incident
Offered free access to identity monitoring services for 12 months at no cost through Kroll
Changes made: Made adjustments to security environment
Developing and implementing additional cybersecurity measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGDec 30 · first

Indiana State AGDec 30 · first

Maine State AGDec 30 · first

Montana State AGDec 30 · first · this page

New Hampshire State AG+5d

Pattern: first filing Dec 30 (MA), last Jan 4 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-26.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2021
Raw hash: dfbc27bf5f72a61f1faa47917fa3a72cd69cac83980a66bb20859af2fbab4dcc

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEQUITY BANCSHARES, INC.

Victim entityEquity Bank

Incidentdiscovered Nov 2, 2021

Stated responseTook steps to resolve the disruption

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov