FEDERALItem 8.01 · voluntaryHackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowActive
COMMUNITY TRUST BANCORP INC /KY/
bd_70fd3423d7acc98e · schema v1 · pii pii-v1
Full breach record for COMMUNITY TRUST BANCORP INC /KY/ →Community Trust Bancorp, Inc. disclosed that a third-party financial institution vendor experienced a MOVEit Transfer vulnerability exploitation, potentially exposing customer personal information. CTBI does not use MOVEit internally but was impacted via the vendor. CTBI is notifying affected customers and the vendor has patched the vulnerability.
SEC clockMateriality determined Aug 11, 2023 → Filed Aug 11, 20230d ✓ SEC 4-day OK2 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/350852/000035085223000090/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Aug 11, 2023
- Raw hash
- 5de5d19398f759e6b91b72f32c62f0c87f254dd000a00c550853f0a955d33be7
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- COMMUNITY TRUST BANCORP INC /KY/norm: community trust bancorp inc ky
- SEC CIK
- 0000350852
Victim entity
- Name
- COMMUNITY TRUST BANCORP INC /KY/norm: community trust bancorp inc ky
- SEC CIK
- 0000350852
Incident
- Discovered
- Aug 9, 2023
- Materiality determined
- Aug 11, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 2 days(2 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Aug 11, 2023→ Filed: Aug 11, 20230d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.