HackingHacking OtherCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
Webster Bank, National Association
bd_8dd6fb8c661b3b58 · schema v1 · pii pii-v1
Full breach record for Webster Bank, National Association →Webster Bank, N.A. identified a security breach that affected its systems between November 27, 2022, and January 22, 2023. The breach was discovered on January 27, 2023. The incident involved an external party hacking into the bank's systems and acquiring personal information, including names and Social Security numbers. A total of 191,563 individuals were affected, with 240 of them being residents of Maine. Webster Bank began notifying the affected individuals on April 10, 2023, and offered them 24 months of identity theft protection services through Experian.
Maine clockDiscovered Jan 27, 2023 → Filed with AG Apr 10, 202373d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_fd452c6f18b5b1e9Montana State AGfiled 2023-04-10Verified
- bd_b26f4a157e67d25bNew Hampshire State AGDaixinfiled 2023-04-12(2d gap)Verified
- bd_519c51969ff5e987Maine State AGfiled 2023-04-28(18d gap)Verified
- bd_8b98ad645053816cNew Hampshire State AGfiled 2023-05-03(23d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a42f73e8-720b-41a2-b892-18181e799668.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2023
- Raw hash
- ae162ad8d22bbd52b4bcb15c374bea02b5bca676b495e8e4bc01c042849a97fc
Reporting entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Victim entity
- Name
- Webster Bank, National Associationnorm: webster bank national
Incident
- Discovered
- Jan 27, 2023
- Materiality determined
- —
- Notification sent
- Apr 10, 2023
- Affected individuals
- 240
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dME resident >60d · 73d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 27, 2023→ Filed with AG: Apr 10, 202373d 30 days (soft) ME AG >30d Maine Discovered: Jan 27, 2023→ Notified: Apr 10, 202373d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.