HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Evolve Bank & Trust
bd_75a9fadea4599369 · schema v1 · pii pii-v1
Full breach record for Evolve Bank & Trust →Evolve Bank & Trust notified Idaho AG on July 8, 2024, of a security event discovered May 29, 2024. Unauthorized actors accessed and downloaded customer data (names, SSNs, bank account numbers) in February and May 2024. Approximately 29,728 Idaho residents were affected. The bank stopped the attack, engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring. No customer funds were accessed.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_1ff6bf62e7850651Oregon State AGfiled 2024-07-08Verified
- bd_859e2a8aac37b2ffMaine State AGfiled 2024-07-08Verified
- bd_91935c803715a403Montana State AGfiled 2024-07-08Verified
- bd_aa5d4b960051d1e4California State AGfiled 2024-07-08Candidate
Show 2 more filings ↓Show fewer ↑up to 7d gap
- bd_fcb8a565ba7193c7Washington State AGfiled 2024-07-08Candidate
- bd_0306a4446fc3494bSEC 8-Kfiled 2024-07-01(7d gap)Candidate
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2024/07/07-08-2024-Evolve-Bank-Trust.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2024
- Raw hash
- a0d6c87adf55c69c36e57405c8da748fc6b1011af212e4753be5b02509a063b6
Reporting entity
- Name
- Evolve Bank & Trustnorm: evolve bank
Victim entity
- Name
- Evolve Bank & Trustnorm: evolve bank
Incident
- Discovered
- May 29, 2024
- Materiality determined
- —
- Notification sent
- Jul 8, 2024
- Affected individuals
- 29,728
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.