MisusePrivilege AbuseStolen CredentialsDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
nbkc Bank
bd_af1d8073c265f390 · schema v1 · pii pii-v1
Full breach record for nbkc Bank →An employee of nbkc Bank provided their company credentials and laptop to an unauthorized third party. This access occurred between March 1, 2020, and July 31, 2020. The incident was discovered on April 3, 2023, and affected 611 individuals. The compromised information included names and financial account or credit/debit card numbers with their corresponding access codes. The bank offered affected individuals 12 months of credit monitoring and identity protection services.
Maine clockDiscovered Apr 3, 2023 → Filed with AG Apr 27, 202324d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed611 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e48a0efe-0cd1-4c01-a48b-a56ac99496aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 27, 2023
- Raw hash
- e9279564d0a50881b7b122784acae87e7ecc2b0dc446e05ba6ede1aa090f2885
Reporting entity
- Name
- nbkc Banknorm: nbkc bank
Victim entity
- Name
- nbkc Banknorm: nbkc bank
Incident
- Discovered
- Apr 3, 2023
- Materiality determined
- —
- Notification sent
- Apr 26, 2023
- Affected individuals
- 611
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Multiple
- Initial access
- insider_action
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 3, 2023→ Filed with AG: Apr 27, 202324d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.