HackingFinancial ServicesFinanceStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Bank of the West
bd_a9952dff3250661e · schema v1 · pii pii-v1
Full breach record for Bank of the West →Bank of the West notified customers of a third-party data breach in which unauthorized parties used compromised credentials to access employee email accounts at a contracted business data analysis service provider. The incident, which occurred on March 2, 2018, potentially exposed business customer names and business identification numbers (which may include Social Security numbers). Bank of the West offered one year of free Identity Guard® credit monitoring services to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9f46f790366be395Montana State AGfiled 2018-08-20Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-139041
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2018
- Raw hash
- a0168d600aaf73eb84718f5bff04c4233c6e165e7aaae018b7c746ed0facb1b2
Reporting entity
- Name
- Bank of the Westnorm: bank of the west
Victim entity
- Name
- Bank of the Westnorm: bank of the west
- Industry
- Financial Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Aug 20, 2018
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Federal law enforcement notified by the service provider
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.