Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

BENEFICIAL STATE BANK

bd_6f9913e4e44e5bbb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 25, 2019

Filed

Nov 6, 2019

To disclose

19 weeks

Affected

2state residents only

Confidence

66%

Full breach record for BENEFICIAL STATE BANK →

Beneficial State Bank notified Montana residents of a data security incident discovered on June 25, 2019, involving unauthorized access to a corporate email account. The incident may have exposed names, addresses, SSNs, and for some, financial account info and driver's license numbers. The bank engaged forensic investigators, reset credentials, implemented MFA, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 134 days

Jun 25, 2019

Discovered

Nov 6, 2019

Filed

vs. sector median

+10 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: BENEFICIAL STATE BANK
norm: beneficial state bank

Name: BENEFICIAL STATE BANK
norm: beneficial state bank
Industry: Financial Servicesllm

Discovered: Jun 25, 2019
Materiality determined: —
Notification sent: Nov 6, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Began an internal investigation
Hired independent computer forensic investigators to assist
Changed the password to the email account
Reviewed security controls to ensure that multi-factor authentication was implemented properly
Arranged for credit monitoring and identity protection services provided by MyIDCare powered by ID Experts
Changes made: Reviewed security controls to ensure that multi-factor authentication was implemented properly
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(134 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notice-54.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2019
Raw hash: eb244cb3860d989347851167dfca186ecdb41a9bee03be907995282f1c45651b

Reporting entityBENEFICIAL STATE BANK

Victim entityBENEFICIAL STATE BANK

Incidentdiscovered Jun 25, 2019

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov