HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
NCB Management Services, Inc.
bd_7d3222e6f53876be · schema v1 · pii pii-v1
Full breach record for NCB Management Services, Inc. →NCB Management Services, Inc. reported an external system breach (hacking) occurring between Feb 1-6, 2023, discovered on Feb 4, 2023. The incident affected 1,087,842 individuals, including 3,261 Maine residents. Compromised data included names and financial account numbers. NCB notified consumers in writing on May 19, 2023, and provided 24 months of identity monitoring through Kroll.
Maine clockDiscovered Feb 4, 2023 → Filed with AG May 23, 2023108d ✗ ME AG >90d15 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 18 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_153c9cd6421b0283Oregon State AGfiled 2023-05-22(1d gap)Verified
- bd_46c7daa7a37aa471Montana State AGfiled 2023-05-22(1d gap)Verified
- bd_7e00d3aca7b39e63New Hampshire State AGfiled 2023-05-22(1d gap)Verified
- bd_84b3b575dbace3ecCalifornia State AGfiled 2023-05-22(1d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 36d gap
- bd_fb57761a0a687491Washington State AGfiled 2023-05-22(1d gap)Verified
- bd_34294cfa92e78083New Hampshire State AGfiled 2023-05-26(3d gap)Verified
- bd_af43cc04b6170eccMontana State AGfiled 2023-05-26(3d gap)Verified
- bd_dc77d4029dd3d7c1Maine State AGfiled 2023-05-26(3d gap)Verified
- bd_a59e7f90661deffdDelaware State AGfiled 2023-06-16(24d gap)Verified
- bd_ebea091fe68ee688New Hampshire State AGfiled 2023-06-28(36d gap)Verified
Showing first 10 of 17 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fcafcce5-ef56-4784-a86a-820c6b1aa127.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2023
- Raw hash
- 56745bc416a1f26e7c20176a6b3c566570a2c17892c067d44d95e3a3940cc994
Reporting entity
- Name
- NCB Management Services, Inc.norm: ncb management
- Industry
- Financial Services
Victim entity
- Name
- NCB Management Services, Inc.norm: ncb management
- Industry
- Financial Services
Incident
- Discovered
- Feb 4, 2023
- Materiality determined
- —
- Notification sent
- May 19, 2023
- Affected individuals
- 1,087,842
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- ME AG >90d · 108dME resident >60d · 104d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 4, 2023→ Filed with AG: May 23, 2023108d 90 days ME AG >90d Maine Discovered: Feb 4, 2023→ Notified: May 19, 2023104d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.