Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Bankers Cooperative Group, Inc.
bd_c8f1f69c62db91e7 · schema v1 · pii pii-v1
Full breach record for Bankers Cooperative Group, Inc. →Bankers Cooperative Group, Inc. (BCG) notified the Maryland AG of a security incident affecting one Maryland resident. BCG identified suspicious activity on an employee email account on August 13, 2024, likely due to phishing. Impacted data included name, address, DOB, SSN, and health insurance info. BCG disabled the account, engaged forensic specialists, reset passwords, enabled MFA, and offered credit monitoring.
Maryland clock✗ MD AG >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376272.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2025
- Raw hash
- b64790c6782570680f8cf9e207b97a55040a3117851cfbd371addd01683b4fd0
Reporting entity
- Name
- CLARK HILL PLCnorm: clark hill
Victim entity
- Name
- Bankers Cooperative Group, Inc.norm: bankers cooperative
Incident
- Discovered
- Aug 13, 2024
- Materiality determined
- —
- Notification sent
- Jan 30, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 24 weeks(170 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.