Social EngineeringFinancial ServicesFinancePhishingBECData ExfiltratedTargetedPIIIdentity (basic)Government IDMediumContained

The First National Bank of Elmer

bd_a88382c447b58fb7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2020

Filed

Aug 20, 2020

To disclose

20 weeks

Affected

2state residents only

Confidence

66%

Full breach record for The First National Bank of Elmer →2 incidents on file

First National Bank of Elmer notified Montana residents of a cyber incident discovered on April 2, 2020. An external threat actor accessed an employee's email account via phishing, attempting a fraudulent wire transfer. The actor likely exfiltrated customer personal information. FNBE engaged forensic investigators, reset credentials, and offered one year of free identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 140 days

Apr 2, 2020

Discovered

Aug 20, 2020

Filed

vs. sector median

+12 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: The First National Bank of Elmer
norm: the first national bank of elmer

Name: The First National Bank of Elmer
norm: the first national bank of elmer
Industry: Financial Servicesllm

Discovered: Apr 2, 2020
Materiality determined: —
Notification sent: Aug 20, 2020
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Changed the login credentials for all persons with access to its computer systems
Implemented additional security measures
Retained legal and technical counsel to determine the source and scope of the outside intrusion
Shut down and disconnected the employee’s computer from the network
Contacted a number of professionals to investigate, assess and respond to the incident
Retained a company with expertise in forensic data breach investigations
Changes made: Implemented additional technological and operational controls on data access and unauthorized intrusion detection using the latest security protocols recommended for our industry
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/elmer-Samp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2020
Raw hash: dd78d6528cb46d07031322bfd6ab2dead6c35c5a6f1278d062b7f1da8dcb622a

Reporting entityThe First National Bank of Elmer

Victim entityThe First National Bank of Elmer

Incidentdiscovered Apr 2, 2020

Stated responseChanged the login credentials for all persons with access to its computer systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov