HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)TargetedIdentity (basic)Financial accountLowContained

Teutopolis State Bank - Fidelity

bd_8996f0e17a4f0fd3 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 29, 2023

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Teutopolis State Bank - Fidelity →

Teutopolis State Bank notified customers of a data incident involving its third-party vendor's use of MOVEit Transfer software. A vulnerability in the tool allowed unauthorized access to files containing customer PII (name, address, account numbers). The vendor patched the vulnerability and suspended the tool. The bank engaged counsel and offered 12 months of identity monitoring via ChexSystems.

J jump to incidentP pin to compareR raw source

Incident timeline

May 31, 2023

Begins

Sep 29, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Teutopolis State Bank - Fidelity
norm: teutopolis state bank fidelity

Name: Teutopolis State Bank - Fidelity
norm: teutopolis state bank fidelity
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 31, 2023
Materiality determined: —
Notification sent: Sep 29, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: working alongside cyber experts and appropriate law enforcement agencies
Initial access: exploit_public_facing

During the incident: Investigate this matter
Obtain necessary information from our vendor
Work with counsel experienced in handling security incidents
Ensure that the vendor promptly investigated and mitigated the effects of the incident
Offering a complimentary 12-month membership to OnAlert TM (Essential Bundle) from ChexSystems
Changes made: Vendor immediately suspended use of the MOVEit Transfer tool
Vendor received and implemented a software patch to remediate the issue
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-732.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2023
Raw hash: 23583cc8fe65eeedf3233ba1ab4bc230371e9f3f1283f25377401493dde5e2b9

Reporting entityTeutopolis State Bank - Fidelity

Victim entityTeutopolis State Bank - Fidelity

IncidentThird-Party / Supply Chain

Stated responseInvestigate this matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov