HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

HANMI BANK

bd_a6c722dbb4e853f6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 16, 2024

To disclose

—

Affected

Not disclosed

Confidence

63%

Full breach record for HANMI BANK →

Hanmi Bank notified customers of a data breach involving its third-party vendor, Fiserv, which used MOVEit Transfer software. Unauthorized actors exploited vulnerabilities in the software to access files between May 27 and May 31, 2023. Affected data may include names and other personal information. Hanmi Bank engaged in investigation, reviewed impacted individuals, and offered two years of identity monitoring through Kroll. The vendor patched systems and remediated vulnerabilities.

J jump to incidentP pin to compareR raw source

Incident timeline

May 27, 2023

Begins

Jan 16, 2024

Filed

Part of FISERV, INC. supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: HANMI BANK
norm: hanmi bank

Name: HANMI BANK
norm: hanmi bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 27, 2023 – May 31, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified regulatory bodies as required
Initial access: supply_chain

During the incident: Verified with the vendor that it took immediate steps to launch a comprehensive investigation
Identified individuals affected and notified regulatory bodies as required
Reviewed the list of potentially impacted individuals provided by the vendor to determine who was impacted and what information was impacted
Arranged for complimentary free identity monitoring service through Kroll for two years
Changes made: Vendor remediated all technical vulnerabilities and patched systems in accordance with the MOVEit software provider’s guidelines
Vendor mobilized a technical response team to examine the relevant MOVEit Transfer systems and ensure that there were no further vulnerabilities
Hanmi Bank reviewed and enhanced policies and procedures regarding information security
Hanmi Bank implemented additional safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-579424
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2024
Raw hash: f73283d4a581ec4a8e7f981085ad64d5f4fbf7ac4ee9517c08729fd1a71c7d56

Reporting entityHANMI BANK

Victim entityHANMI BANK

IncidentThird-Party / Supply Chain

Stated responseVerified with the vendor that it took immediate steps to launch a comprehensive investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov