DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDHigh

NVE Bank

bd_8d6834197faa1c08 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 10, 2021

Filed

Nov 3, 2021

To disclose

12 weeks

Affected · nationwide

19,0398 in this filing

Linked

5 filings

Confidence

50%
Full breach record for NVE Bank

NVE Bank reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on July 29, 2021. The breach was discovered on August 10, 2021. The incident affected 19,039 individuals in total, including 8 residents of Maine. The compromised information includes names in combination with Social Security numbers. In response, NVE Bank began notifying affected consumers on November 3, 2021, and offered one year of identity theft protection services through Experian.

Maine clockDiscovered Aug 10, 2021Filed with AG Nov 3, 202185d ME AG >30d12 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 12 days
discovery → filing · 12 weeks / 85 days

Jul 29, 2021

Begins

Aug 10, 2021

Discovered

Nov 3, 2021

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Indiana State AGNov 3 · first
Maine State AGNov 3 · first · this page

Pattern: first filing Nov 3 (IN), last Dec 31 (ME) — a 58-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.