HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Webster Bank, National Association
bd_8b98ad645053816c · schema v1 · pii pii-v1
Full breach record for Webster Bank, National Association →Webster Bank NA filed a supplemental notice with the New Hampshire Attorney General regarding a data breach involving third-party vendor Guardian Analytics, Inc. Unauthorized third parties accessed Guardian's systems between November 27, 2022, and January 22, 2023, exfiltrating client personal information. Webster learned of the incident on January 26, 2023. The notice covers 16 additional New Hampshire residents. Webster offered 24 months of Experian IdentityWorks.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_519c51969ff5e987Maine State AGfiled 2023-04-28(5d gap)Verified
- bd_b26f4a157e67d25bNew Hampshire State AGDaixinfiled 2023-04-12(21d gap)Verified
- bd_8dd6fb8c661b3b58Maine State AGfiled 2023-04-10(23d gap)Candidate
- bd_fd452c6f18b5b1e9Montana State AGfiled 2023-04-10(23d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/webster-bank-20230503.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 3, 2023
- Raw hash
- 5cec33246381abfa8d64fa8d9d52a76207dada6321e312228d4391008e38b9ac
Reporting entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Victim entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Incident
- Discovered
- Jan 26, 2023
- Materiality determined
- —
- Notification sent
- Apr 10, 2023
- Affected individuals
- 16
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Guardian notified law enforcement and is cooperating with their investigation
- Third party
- via Guardian Analytics, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 weeks(97 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.