HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Summit National Bank

bd_bcfa67397cf2ae88 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 28, 2024

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Summit National Bank →2 incidents on file

Summit State Bank notified customers of unauthorized access to an employee's email account between October 16 and October 25, 2023. The bank engaged a third-party cybersecurity firm and determined on February 7, 2024, that some customers' personal information was involved. The bank is offering one year of complimentary identity monitoring through Kroll and implementing additional security safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 16, 2023

Begins

Mar 28, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Summit National Bank
norm: summit national bank

Name: Summit National Bank
norm: summit national bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 16, 2023 – Oct 25, 2023
Materiality determined: —
Notification sent: Feb 7, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to ensure our email environment was secure
Commenced an investigation
Engaged a third-party cybersecurity firm to assist
Secured the services of Kroll to provide identity monitoring at no cost for one year
Changes made: Implementing additional safeguards and security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-583180
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 28, 2024
Raw hash: 58ab6b051ca30e3e1100abc6f524f4e412c542d94d6afdd63085c14fbaaf0110

Reporting entitySummit National Bank

Victim entitySummit National Bank

IncidentUnauthorized Access

Stated responseTook steps to ensure our email environment was secure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov