FEDERALItem 8.01 · voluntaryHackingVulnerability ExploitTargetedLowActive
The Middlefield Banking Company
bd_c3e9962da013c767 · schema v1 · pii pii-v1
Full breach record for The Middlefield Banking Company →Middlefield Banc Corp. reported a cyber-attack on April 12, 2023, disrupting systems at its subsidiary, The Middlefield Banking Company. The Bank remediated the vulnerability, engaged forensic investigators, and notified law enforcement. The investigation is ongoing to determine if customer data was impacted. No material financial impact is currently expected.
SEC clockMateriality determined Apr 12, 2023 → Filed Apr 21, 20239d ✗ SEC 4-day late9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/836147/000119312523110661/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Apr 21, 2023
- Raw hash
- f45529a2539dab251b7504b6000690c58cdf9389ea384867c1821b6348dabe08
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- MIDDLEFIELD BANC CORP.norm: middlefield banc
- SEC CIK
- 0000836147
Victim entity
- Name
- The Middlefield Banking Companynorm: the middlefield banking
Incident
- Discovered
- Apr 12, 2023
- Materiality determined
- Apr 12, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- SEC 4-day late · 9d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Apr 12, 2023→ Filed: Apr 21, 20239d cal. 4 business days SEC 4-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.