HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIILowContained
Bank of Clarke
bd_d7db8ec8d1b6322e · schema v1 · pii pii-v1
Full breach record for Bank of Clarke →Bank of Clarke, a financial services institution based in Berryville, VA, reported that an unknown unauthorized third party gained access to one employee email account on June 17, 2024. The breach was discovered on July 17, 2024. The email account may have contained names and other personal information of affected individuals. 1,652 total persons were affected, including 1 Maine resident. Notifications were sent on August 23, 2024. Experian IdentityWorks Credit 3B (12 months) was offered.
Maine clockDiscovered Jul 17, 2024 → Filed with AG Aug 23, 202437d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f9d0e023-5151-4856-89e1-38006599719c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2024
- Raw hash
- 6240d720db49bb7f1eb6236cb56b7657344cf5a59f3f1c5d480e21f9f8c4940a
Reporting entity
- Name
- Bank of Clarkenorm: bank of clarke
- Industry
- Financial Services
Victim entity
- Name
- Bank of Clarkenorm: bank of clarke
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jul 17, 2024
- Materiality determined
- —
- Notification sent
- Aug 23, 2024
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 17, 2024→ Filed with AG: Aug 23, 202437d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.