MalwareRansomwareCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
The Exchange Bank
bd_7b50f7fd9f60f7a3 · schema v1 · pii pii-v1
Full breach record for The Exchange Bank →The Exchange Bank notified the NH Attorney General of a data security incident discovered on Nov 19, 2022. Malware infected servers/workstations, leading to data access/exfiltration by an unauthorized actor. Two NH residents' PII was impacted. Bank engaged forensic specialists, disconnected systems, and implemented security improvements including EDR and password changes. Kroll provided 1-year credit monitoring.
Leak gap clock⏱ Leak >90d22 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
A leak claim by black_basta about this victim predates this filing by 123 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/exchange-bank-20230421.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2023
- Raw hash
- 5c747e47ec0a942b9775f6c90a9404015c025d6866b12fd154703574a66e7340
Reporting entity
- Name
- The Exchange Banknorm: the exchange bank
Victim entity
- Name
- The Exchange Banknorm: the exchange bank
Incident
- Discovered
- Nov 19, 2022
- Materiality determined
- Feb 23, 2023
- Notification sent
- Apr 21, 2023
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified NH Department of Justice Office of the Attorney General
Compliance
- Time to disclose
- 22 weeks(153 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.