HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
CENTRAL BANK
bd_a9865f0b5abc45f0 · schema v1 · pii pii-v1
Full breach record for CENTRAL BANK →Central Bank, a financial services organization, experienced an external system breach on December 27, 2021. The incident, discovered on February 15, 2022, affected 4,747 individuals. The compromised information included names combined with financial account numbers or credit/debit card numbers along with their respective security codes or PINs. Central Bank began notifying affected individuals in writing on March 8, 2022, and offered one year of identity monitoring services through Kroll.
Maine clockDiscovered Feb 15, 2022 → Filed with AG Mar 8, 202221d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0dfb21d970bf0ff1Montana State AGfiled 2022-03-08Candidate
- bd_ab52fad5322dc7c8New Hampshire State AGfiled 2022-03-08Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/df59fae4-1149-448e-8acd-ba3350a2dc84.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 8, 2022
- Raw hash
- a77b4f50ff3be1de5955c0a248daba21a8fdfe05c196ec8b936488c0ba127770
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- CENTRAL BANKnorm: central bank
Incident
- Discovered
- Feb 15, 2022
- Materiality determined
- —
- Notification sent
- Mar 8, 2022
- Affected individuals
- 4,747
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 15, 2022→ Filed with AG: Mar 8, 202221d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.