HackingCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Middlefield Banking Company
bd_cc811a129570fcd5 · schema v1 · pii pii-v1
Full breach record for The Middlefield Banking Company →The Middlefield Banking Company experienced a data security incident on April 12, 2023, where an unauthorized actor accessed systems between April 11-12, 2023. The actor acquired files containing names, dates of birth, and passport numbers of employees and customers. The bank engaged outside specialists, notified federal law enforcement, and implemented enhanced security controls. Affected individuals were offered 12 months of credit monitoring.
California clockDiscovered Apr 12, 2023 → Notified Dec 21, 2023253d ✗ CA 60-day late36 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2dee8d0f47f231bcVermont State AGfiled 2023-12-21Verified
- bd_4752d46a27914d1aMontana State AGfiled 2023-12-21Candidate
- bd_719ea19c8e005680New Hampshire State AGfiled 2023-12-21Verified
- bd_d3345e13b9cb6e07SEC 8-Kfiled 2023-12-21Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578344
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- 6aeebc7ad78f931c501b42e4bfcc941d1532471084973a8ce92de0ba563a77af
Reporting entity
- Name
- The Middlefield Banking Companynorm: the middlefield banking
Victim entity
- Name
- The Middlefield Banking Companynorm: the middlefield banking
Incident
- Discovered
- Apr 12, 2023
- Materiality determined
- —
- Notification sent
- Dec 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Correspondence with federal law enforcement authorities
Compliance
- Time to disclose
- 36 weeks(253 days from discovery to filing)
- Compliance flags
- CA 60-day late · 253d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 12, 2023→ Notified: Dec 21, 2023253d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.