HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Woodsville Guaranty Savings Bank

bd_c124f866b83880fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 8, 2023

Filed

Jan 5, 2024

To disclose

21 weeks

Affected

681state residents only

Linked

5 filings

Confidence

66%

Full breach record for Woodsville Guaranty Savings Bank →

Woodsville Guaranty Savings Bank (WGSB) notified 681 New Hampshire residents of a data breach involving its third-party vendor, Fiserv. The incident stemmed from vulnerabilities in Fiserv's MOVEit Transfer software, with unauthorized access occurring between May 27 and 31, 2023. WGSB was notified by Fiserv on August 8, 2023. The breach potentially exposed names and government-issued identifiers. WGSB engaged forensic specialists, notified law enforcement and regulators, terminated its relationship with Fiserv, and provided two years of complimentary credit monitoring through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 73 days

discovery → filing · 21 weeks / 150 days

May 27, 2023

Begins

Aug 8, 2023

Discovered

Jan 5, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Part of FISERV, INC. supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_446f0dfe95f66ddb2024-01-05Verified
Indiana State AGbd_5bb447cbb3999d162024-01-05Verified
Maine State AGbd_5d5382c52e10ff722024-01-05Candidate
Montana State AGbd_74c85f1bc12070322024-01-05Verified

Name: Woodsville Guaranty Savings Bank
norm: woodsville guaranty savings bank

Name: Woodsville Guaranty Savings Bank
norm: woodsville guaranty savings bank
Industry: Financial Servicesllm

Discovered: Aug 8, 2023
Breach occurred: May 27, 2023 – May 31, 2023
Undetected for: 73 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 5, 2024
Affected individuals: 681state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementNotified state and federal regulatorsProvided written notice to relevant state regulatorsNotified the three major credit reporting agencies (Equifax, Experian, and TransUnion)
Third party: via Fiserv
Initial access: exploit_public_facing

During the incident: Moved quickly to investigate and respond to the incident
Assessed WGSB’s own systems to confirm that they were not affected
Reviewed and verified the data from Fiserv regarding impacted individuals
Notified federal law enforcement and its state and federal regulators
Ended its relationship with Fiserv shortly after its investigation into this event concluded
Provided access to credit monitoring services for individuals whose personal information was potentially affected, through Kroll, at no cost
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of this incident to relevant state regulators and to the three major credit reporting agencies
Changes made: Third-party vendor remediated all technical vulnerabilities and patched systems in accordance with the MOVEit software provider’s guidelines
Third-party vendor mobilized a technical response team to examine the relevant MOVEit Transfer systems and ensure that there were no further vulnerabilities
WGSB ended its relationship with the third-party vendor involved in this incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(150 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGJan 5 · first

Indiana State AGJan 5 · first

Maine State AGJan 5 · first

Montana State AGJan 5 · first

New Hampshire State AGJan 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/woodsville-guaranty-savings-bank-20240105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2024
Raw hash: 659222a5b06e2c859708a77cfdb98d1a39a351918d70601f8cd32fa2f46e57d0

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWoodsville Guaranty Savings Bank

Victim entityWoodsville Guaranty Savings Bank

Incidentdiscovered Aug 8, 2023

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov