Merrick Bank
bd_818cfdd6c4552b30 · schema v1 · pii pii-v1
All records for Merrick Bank →3 incidents on fileAccount takeover notice
Merrick Bank notified cardholders of unauthorized access to their accounts. The filing says: “On March 15, 2019, we learned through our investigation that an unauthorized individual or group obtained access to the online accounts of some of our cardholders using credential information obtained elsewhere , therefore, out of an abundance of caution, we are providing you with notification, credit and identity monitoring services, and resources that you can use to protect yourself.”
Merrick Bank notified Montana residents of a data security incident detected on March 8, 2019. Unauthorized individuals accessed some cardholder online accounts using credential information obtained elsewhere. Impacted data included names, emails, account balances, credit limits, last four digits of credit cards, and transaction histories. The bank engaged forensic experts, reported to law enforcement, and offered one year of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 8, 2019
Discovered
Apr 12, 2019
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- New Hampshire State AGbd_4e97035f865520a52019-04-12Candidate
- Massachusetts State AGbd_e9f204dbd83c82552019-04-12Verified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.