HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICCVE-2023-34362LowContained
Savers Co-operative Bank
bd_7e91c3e2305447a4 · schema v1 · pii pii-v1
Full breach record for Savers Co-operative Bank →Savers Bank notified the NH Attorney General of a data security incident involving its MOVEit third-party vendor. The bank learned of the incident on July 18, 2023. No Savers Bank systems were compromised. 23 NH residents were notified on August 31, 2023. The incident involved PII of customers held by the vendor. No evidence of misuse was found.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9a7d4f190fec9454Maine State AGfiled 2023-09-12Candidate
- bd_3477cbf7767b60dbVermont State AGfiled 2023-08-31(12d gap)Verified
- bd_b4cbb98b22f00984Vermont State AGfiled 2023-08-31(12d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/savers-bank-20230912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2023
- Raw hash
- 85cf3381ceec40a3576aaa8273f0223e2aa05c83fbc3df136bd0bf8138bd4edd
Reporting entity
- Name
- Savers Co-operative Banknorm: savers co operative bank
- Domain
- saversbank.com
Victim entity
- Name
- Savers Co-operative Banknorm: savers co operative bank
- Domain
- saversbank.com
Incident
- Discovered
- Jul 18, 2023
- Materiality determined
- —
- Notification sent
- Aug 31, 2023
- Affected individuals
- 23
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- supply_chain
- CVE references
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.