HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
The Old Point National Bank of Phoebus
bd_9ff4fe7fa56f0ef4 · schema v1 · pii pii-v1
Full breach record for The Old Point National Bank of Phoebus →Old Point National Bank notified the Idaho Attorney General on November 30, 2022, regarding a cybersecurity incident occurring on September 2, 2022. An unauthorized user accessed a business email account, potentially exposing personal information of Idaho loan applicants, including names, SSNs, driver's licenses, and financial account numbers. Approximately 6 Idaho residents were affected. The bank engaged forensic experts, reported to law enforcement (FBI, CISA, Virginia State Police), and provided one year of credit monitoring via Kroll.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_10e547fa1388b925Maine State AGfiled 2022-11-09(21d gap)Candidate
- bd_2479445bced6fac8Montana State AGfiled 2022-11-09(21d gap)Verified
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/11/11-30-22-Old-Point-National-Bank.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 30, 2022
- Raw hash
- b4434304465dc3c2f47b4f95f14fc100ca330d595c4dc5094301c86a2b10bf86
Reporting entity
- Name
- The Old Point National Bank of Phoebusnorm: the old point national bank of phoebus
- Domain
- oldpoint.com
Victim entity
- Name
- The Old Point National Bank of Phoebusnorm: the old point national bank of phoebus
- Domain
- oldpoint.com
Incident
- Discovered
- Sep 3, 2022
- Materiality determined
- —
- Notification sent
- Nov 30, 2022
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Idaho Attorney General’s Office Consumer Protection Division
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.