HackingVulnerability ExploitSupply Chain (Dependency)Customer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTCVE-2023-34362LowResolved
CNB Bank & Trust, N.A.
bd_cff98f1b1cb86182 · schema v1 · pii pii-v1
Full breach record for CNB Bank & Trust, N.A. →CNB Bank & Trust, N.A. notified 4 individuals of a data breach stemming from the MOVEit Transfer vulnerability. The breach occurred between May 27, 2023, and May 31, 2023, and was discovered on October 26, 2023. The compromised information included names and financial account numbers. The bank offered two years of credit monitoring and identity theft prevention services through Kroll.
Maine clockDiscovered Oct 26, 2023 → Filed with AG Nov 15, 202320d ✓ ME AG ≤30d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_18a16db520429363Montana State AGfiled 2023-11-15Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9660775d-7ebf-4a25-b9c2-409f43a0f4c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 15, 2023
- Raw hash
- 607e0476d4184659c11a6e80580ba8e83595e5f93c8f6d05a4ae55d377fca032
Reporting entity
- Name
- CNB Bank & Trust, N.A.norm: cnb bank trust na
Victim entity
- Name
- CNB Bank & Trust, N.A.norm: cnb bank trust na
Incident
- Discovered
- Oct 26, 2023
- Materiality determined
- —
- Notification sent
- Nov 15, 2023
- Affected individuals
- 4
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- CVE references
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 26, 2023→ Filed with AG: Nov 15, 202320d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.