HackingFinancial ServicesFinanceVulnerability ExploitStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDCredentialsMediumActive

Bank of the West

bd_b25a200ad1ae3d44 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 19, 2013

Filed

Feb 5, 2014

To disclose

7 weeks

Affected

3state residents only

Linked

3 filings

Confidence

67%

Full breach record for Bank of the West →10 incidents on file

Bank of the West notified the NH Attorney General that unauthorized individuals accessed a retired internet job application on Dec 19, 2013. Approximately 3 NH residents were affected. Data included names, SSNs, driver's licenses, DOBs, and credentials. The bank engaged forensic experts, secured servers, cooperated with law enforcement, and offered 12 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 48 days

Dec 19, 2013

Discovered

Feb 5, 2014

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_2da3bfcafcf753662014-02-05Candidate
Massachusetts State AGbd_305564051e1547c72014-02-06 · +1dVerified

Name: Bank of the West
norm: bank of the west
Industry: financial_services

Name: Bank of the West
norm: bank of the west
Industry: financial_services
Industry: Financial Servicesllm

Discovered: Dec 19, 2013
Materiality determined: —
Notification sent: Feb 5, 2014
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDCredentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the Attorney General, State of New Hampshire
Initial access: exploit_public_facing

During the incident: Engaged forensic experts to secure the servers and to investigate the event
Servers involved were promptly secured
Additional security measures were established
Actively cooperating with law enforcement in their investigation of this incident
Offered to provide affected individuals with services of First Watch ID to monitor activity within the United States for 12 months at no cost to the individual
Changes made: Additional security measures were established
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGFeb 5 · first

New Hampshire State AGFeb 5 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bank-west-20140205.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2014
Raw hash: afa60db7edf63e160f52f3551d961e8e3541974c3d7473b7a4b64e661acb6d7a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBank of the West

Victim entityBank of the West

Incidentdiscovered Dec 19, 2013

Stated responseEngaged forensic experts to secure the servers and to investigate the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov