HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Leader Bank, National Association
bd_abc4a76a5ea1e65d · schema v1 · pii pii-v1
Full breach record for Leader Bank, National Association →Leader Bank, N.A. notified consumers of a data breach involving its vendor, Progress Software, which used MOVEit Transfer software. Unauthorized access occurred between May 27-31, 2023, exposing customer names and bank account numbers. Leader Bank engaged in investigation, patched systems, and provided two years of complimentary identity monitoring via Kroll.
Vermont clock⏱ VT AG >14 bday27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2cb3a5106f844a23Montana State AGfiled 2023-08-30Candidate
- bd_8167850bea03b9e7Maine State AGfiled 2023-08-30Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-30-leader-bank-progress-software-moveit-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 30, 2023
- Raw hash
- 4420fc27698f7023c1f42076933dd5a155c569508de57a50a1aabb7612a7c8a6
Reporting entity
- Name
- Leader Bank, National Associationnorm: leader bank national
Victim entity
- Name
- Leader Bank, National Associationnorm: leader bank national
Incident
- Discovered
- Aug 3, 2023
- Materiality determined
- Aug 30, 2023
- Notification sent
- Aug 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified regulatory bodies as required
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.