HackingFinancial ServicesFinanceStolen CredentialsTargetedIdentity (basic)LowContained

VCC Bank

bd_ad05e064aa24eb70 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 29, 2022

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for VCC Bank →

VCC Bank notified Montana residents of a data security incident where an unauthorized individual accessed an employee email account between July 13 and 17, 2022. The investigation concluded on November 1, 2022, revealing that the account contained full names. No identity fraud was reported. The bank engaged outside cybersecurity professionals and recommends credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 13, 2022

Begins

Nov 29, 2022

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_e24ca2ecbdb5c94b2022-11-30 · +1dVerified
Indiana State AGbd_ed4c1709aeee6e582022-11-30 · +1dVerified

Name: VCC Bank
norm: vcc bank

Name: VCC Bank
norm: vcc bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 13, 2022 – Jul 17, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Devoted considerable time and effort to determine what information was contained in the affected account
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 29 · first · this page

Massachusetts State AG+1d

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/consumer-notification-letter-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2022
Raw hash: 8e71412e1f2ab1c4b58d34eec1258387cc1c7d3c8d746e21c38f5ebc2aabbf20

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityVCC Bank

Victim entityVCC Bank

IncidentUnauthorized Access

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov