FEDERALItem 1.05 · mandatoryHackingFinancial ServicesFinanceOther CreditStolen CredentialsSupply Chain (3P Vendor)TargetedLowContained

Federal Home Loan Bank of New York

bd_a086727096115bc6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 21, 2024

Filed

Mar 1, 2024

To disclose

9 days

Affected

Not disclosed

Confidence

67%

Full breach record for Federal Home Loan Bank of New York →

Federal Home Loan Bank of New York detected an attempt by unknown persons to fraudulently obtain funds on February 21, 2024. The incident was caused by a compromise of a fourth-party vendor. The Bank's systems were not compromised, no unauthorized transactions occurred, and no funds were transferred. The incident has been contained and is not considered material to the Bank's financial condition.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 days

Feb 21, 2024

Discovered

Mar 1, 2024

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Federal Home Loan Bank of New York
norm: federal home loan bank of new york
SEC CIK: 0001329842
Domain: fhlbny.com

Name: Federal Home Loan Bank of New York
norm: federal home loan bank of new york
SEC CIK: 0001329842
Domain: fhlbny.com
Industry: Financial Servicesnaics map
NAICS 522299 · International, Secondary Market, and All Other Nondepository Credit Intermediation

Discovered: Feb 21, 2024
Materiality determined: Mar 1, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Initial access: supply_chain

During the incident: Activated its response process
Took prompt steps to contain and remediate the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1329842/000165495424002505/fhlbny_8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Mar 1, 2024
Raw hash: 1ee68751b82bb3811090193413a55c652a272718b60219e16c3673621b4a8c73

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html22.7 KB

Download View at source

Reporting entityFederal Home Loan Bank of New York

Victim entityFederal Home Loan Bank of New York

Incidentdiscovered Feb 21, 2024

Stated responseActivated its response process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing