Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

First Western Federal Savings Bank

bd_7f776268ce584879 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 5, 2021

Filed

Apr 21, 2021

To disclose

—

Affected

3state residents only

Linked

2 filings

Confidence

65%

Full breach record for First Western Federal Savings Bank →

First Western Federal Savings Bank notified Montana residents of a data breach involving unauthorized access to an employee's email account. The incident occurred around November 4-5, 2020, and was discovered on November 5, 2021. The breach exposed personal information including names and potentially other PII. The bank secured the account, investigated, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 366 days

discovery → filing · ≤1 day / 0 days

Nov 4, 2020

Begins

Nov 5, 2021

Discovered

Apr 21, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_01cebb38201393ec2021-04-21Verified

Name: First Western Federal Savings Bank
norm: first western federal savings bank

Name: First Western Federal Savings Bank
norm: first western federal savings bank
Industry: Financial Servicesllm

Discovered: Nov 5, 2021
Breach occurred: Nov 4, 2020 – Nov 5, 2020
Undetected for: 366 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Secured the affected email account
Launched an investigation to determine the nature and scope of the event
Performed a comprehensive review of all information stored in the email account
Conducted a thorough manual review of our records to determine the identities and contact information for potentially impacted individuals
Offering 24 months of complimentary credit monitoring and identity restoration services through Epiq
Changes made: Reviewing existing policies and procedures
Implementing additional safeguards to further secure the information in our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGApr 21 · first

Montana State AGApr 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/First-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 21, 2021
Raw hash: 9698b82a2553e85c40a6816ddde2edfdc269d5820a5a96ec8a2f9ca6db4d212d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFirst Western Federal Savings Bank

Victim entityFirst Western Federal Savings Bank

Incidentdiscovered Nov 5, 2021

Stated responseSecured the affected email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov