HackingHacking OtherCustomer Data InvolvedDownstream VictimsSupply Chain (3P Vendor)IDENTITY_GOVERNMENTHighContained
NCB Management Services, Inc.
bd_7c9850ba7a373019 · schema v1 · pii pii-v1
Full breach record for NCB Management Services, Inc. →NCB Management Services, Inc., a financial services company and a vendor for Bank of America, experienced an external system breach (hacking) on February 1, 2023. The breach was discovered on February 4, 2023. The incident resulted in the compromise of names and driver's license or non-driver identification card numbers for 494,969 individuals, including 1,925 residents of Maine. Affected individuals were notified on March 24, 2023, and offered 24 months of identity theft protection services through Experian.
Maine clockDiscovered Feb 4, 2023 → Filed with AG Mar 24, 202348d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 18 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_153c9cd6421b0283Oregon State AGfiled 2023-05-22(59d gap)Verified
- bd_46c7daa7a37aa471Montana State AGfiled 2023-05-22(59d gap)Verified
- bd_7e00d3aca7b39e63New Hampshire State AGfiled 2023-05-22(59d gap)Verified
- bd_84b3b575dbace3ecCalifornia State AGfiled 2023-05-22(59d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 96d gap
- bd_7d3222e6f53876beMaine State AGfiled 2023-05-23(60d gap)Verified
- bd_34294cfa92e78083New Hampshire State AGfiled 2023-05-26(63d gap)Verified
- bd_af43cc04b6170eccMontana State AGfiled 2023-05-26(63d gap)Verified
- bd_dc77d4029dd3d7c1Maine State AGfiled 2023-05-26(63d gap)Verified
- bd_a59e7f90661deffdDelaware State AGfiled 2023-06-16(84d gap)Verified
- bd_ebea091fe68ee688New Hampshire State AGfiled 2023-06-28(96d gap)Verified
Showing first 10 of 17 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/65d544dc-79b0-437c-a7f8-757ffec624af.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2023
- Raw hash
- 865102bc21f9ff74b0605ea42f1c3a58051be483accc571fc7d9c0a766445141
Reporting entity
- Name
- NCB Management Services, Inc.norm: ncb management
- Industry
- Financial Services
Victim entity
- Name
- NCB Management Services, Inc.norm: ncb management
- Industry
- Financial Services
Incident
- Discovered
- Feb 4, 2023
- Materiality determined
- —
- Notification sent
- Mar 24, 2023
- Affected individuals
- 1,925
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 4, 2023→ Filed with AG: Mar 24, 202348d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.