HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

Savers Co-operative Bank

bd_b4cbb98b22f00984 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 18, 2023

Filed

Aug 31, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

68%

Full breach record for Savers Co-operative Bank →345 incidents on file

Savers Bank notified Vermont consumers of a data security incident involving third-party vendor Progress Software (MOVEit) on July 18, 2023. The incident exposed customer PII (names, addresses) but not SSNs or financial account data. Savers Bank stated its own systems were not compromised. No specific count of affected individuals was provided in the filing.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 44 days

Jul 18, 2023

Discovered

Aug 31, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 9 about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Vermont State AGbd_3477cbf7767b60db2023-08-31Verified
Massachusetts State AGbd_37f221c11d8de8602023-09-12 · +12dVerified
New Hampshire State AGbd_7e91c3e2305447a42023-09-12 · +12dVerified
Maine State AGbd_9a7d4f190fec94542023-09-12 · +12dCandidate

Show 4 more filings ↓up to 24d gap

Massachusetts State AGbd_40d4817f656040dd2023-09-13 · +13dVerified
Massachusetts State AGbd_48f5a6bf2784c4912023-08-07 · +24dCandidate
Massachusetts State AGbd_5b976bf0bf466a062023-08-07 · +24dCandidate
Massachusetts State AGbd_6163dcdb3076eea42023-08-07 · +24dCandidate

Name: Savers Co-operative Bank
norm: savers co operative bank
Domain: saversbank.com

Name: Savers Co-operative Bank
norm: savers co operative bank
Domain: saversbank.com
Industry: Financial Servicesllm

Discovered: Jul 18, 2023
Materiality determined: —
Notification sent: Aug 31, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Third party: via Progress Software
Initial access: supply_chain

During the incident: Notifying affected customers
Recommending customers review account statements and credit reports
Recommending customers place fraud alerts or security freezes on credit reports
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 7 · first

Vermont State AG+24d

Vermont State AG+24d · this page

Massachusetts State AG+36d

New Hampshire State AG+36d

Maine State AG+36d

Massachusetts State AG+37d

Pattern: first filing Aug 7 (MA), last Sep 13 (MA) — a 37-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-31-savers-bank-progress-software-moveit-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2023
Raw hash: 188ae4475cb7c0f29fc6365b68099d97283b45cf07769da04f709acfc66b0d37

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entitySavers Co-operative Bank

Victim entitySavers Co-operative Bank

Incidentdiscovered Jul 18, 2023

Stated responseNotifying affected customers

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov