PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDHighContained

UniBank

bd_7a939ba2616c573e · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 9, 2021

Filed

Jul 6, 2021

To disclose

27 days

Affected

11,276state residents only

Linked

3 filings

Confidence

70%

Full breach record for UniBank →3 incidents on file

UniBank reported the theft of an electronic device containing customer data (names, SSNs, driver's licenses) of 11,276 Washington residents. The incident occurred on June 9, 2021. UniBank notified law enforcement, offered one year of credit monitoring via Kroll, and mailed notifications on July 6, 2021.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d27 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 27 days

Jun 9, 2021

Begins

Jun 9, 2021

Discovered

Jul 6, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_754114b62a6e11bb2021-07-06Verified
Montana State AGbd_ab4f46cd303b6bd52021-07-07 · +1dVerified

Name: UniBank
norm: unibank
Domain: unibankusa.com
Industry: Finance

Name: UniBank
norm: unibank
Domain: unibankusa.com
Industry: Finance
Industry: Financial Servicesllm

Discovered: Jun 9, 2021
Breach occurred: Jun 9, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 6, 2021
Affected individuals: 11,276state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified federal regulators

During the incident: Notified law enforcement and federal regulators
Conducted a review of the data that was potentially accessible from the stolen device
Mailing notification letters via U.S. mail to the 11,276 Washington residents
Offering a one-year membership in complimentary credit monitoring and identity protection services through Kroll
Established a dedicated call center
Changes made: Reviewing the security processes and procedures regarding its electronic devices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 6 · first

Washington State AGJul 6 · first · this page

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10475.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2021
Raw hash: 28983e11207c0ef3aad13a6295957959d5362782c650826ea5c436d64dbf5623

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityUniBank

Victim entityUniBank

Incidentdiscovered Jun 9, 2021

Stated responseNotified law enforcement and federal regulators

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com