HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowActive
The Village Bank
bd_cb0b23dce9519a13 · schema v1 · pii pii-v1
Full breach record for The Village Bank →The Village Bank notified Massachusetts residents that data related to its Debit MasterCard program (including CVC2, account numbers, expiration dates, and cardholder names) was recovered from the 'B1ack Stash Market' dark web marketplace between May 25 and June 13, 2026. The bank stated its own systems were not breached, attributing the incident to a third-party merchant. No fraudulent transactions were detected, but cardholders were offered free card reissuance.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d885e5a9d71e22e9Massachusetts State AGfiled 2026-05-01(31d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-999-the-village-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 5d60c3512d2ab17bac076e33bc1f416a9a1e21d250796a6e9689cd7e9856b8ee
Reporting entity
- Name
- The Village Banknorm: the village bank
Victim entity
- Name
- The Village Banknorm: the village bank
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jun 18, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.