Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedPIIFinancial accountLowContained

Old Second National Bank

bd_98f4043027ba7576 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 27, 2018

Filed

Jun 11, 2018

To disclose

6 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Old Second National Bank →

Old Second National Bank notified customers of a security incident where an employee's email account was compromised via suspicious activity. The unauthorized access may have exposed customer trust names and account numbers. The bank engaged forensic investigators, reset passwords, restricted remote email access, and enhanced email security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Apr 27, 2018

Discovered

Jun 11, 2018

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Old Second National Bank
norm: old second national bank

Name: Old Second National Bank
norm: old second national bank
Industry: Financial Servicesllm

Discovered: Apr 27, 2018
Materiality determined: —
Notification sent: Jun 18, 2018
Affected individuals: 1state-resident count only
Data types: PIIFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Hired an independent computer forensic investigator
Resetting all email account passwords
Prohibiting employees from accessing their email accounts from remote locations
Adding enhanced security measures to our email system
Providing our employees with training on the protection of sensitive information
Changes made: Prohibiting employees from accessing their email accounts from remote locations
Adding enhanced security measures to our email system
Providing our employees with training on the protection of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Old-Second-Bank.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2018
Raw hash: c9d15cc81245a3004669fe90a5a1121d961842401b1af72ffc7bff9fffc0add6

Reporting entityOld Second National Bank

Victim entityOld Second National Bank

Incidentdiscovered Apr 27, 2018

Stated responseHired an independent computer forensic investigator

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov