HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Middlefield Banking Company
bd_719ea19c8e005680 · schema v1 · pii pii-v1
Full breach record for The Middlefield Banking Company →Middlefield Banking Company experienced a data security incident between April 11-12, 2023, where an unauthorized actor accessed systems and acquired files containing employee and customer information. The bank notified federal law enforcement, implemented enhanced security controls, and provided credit monitoring services to affected individuals. 54 New Hampshire residents were notified.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2dee8d0f47f231bcVermont State AGfiled 2023-12-21Verified
- bd_4752d46a27914d1aMontana State AGfiled 2023-12-21Candidate
- bd_cc811a129570fcd5California State AGfiled 2023-12-21Verified
- bd_d3345e13b9cb6e07SEC 8-Kfiled 2023-12-21Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/middlefield-banking-company-20231221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- cee2ca005c717efbd2040eef9a2c1cdb11197553c70d972f1100dc2ac9c50d25
Reporting entity
- Name
- The Middlefield Banking Companynorm: the middlefield banking
Victim entity
- Name
- The Middlefield Banking Companynorm: the middlefield banking
Incident
- Discovered
- Apr 12, 2023
- Materiality determined
- Nov 21, 2023
- Notification sent
- Dec 21, 2023
- Affected individuals
- 54
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcementproviding notice of this incident to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 36 weeks(253 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.