HackingStolen CredentialsData ExfiltratedData PublishedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
The Village Bank
bd_d885e5a9d71e22e9 · schema v1 · pii pii-v1
Full breach record for The Village Bank →The Village Bank notified Massachusetts residents of a security breach involving data recovered from the 'B1ack Stash Market' dark web marketplace. Compromised data included cardholder names, addresses, account numbers, expiration dates, and CVC2 codes. The bank stated its own systems were not breached, but data was obtained from an impacted merchant. No fraudulent transactions were detected on affected accounts.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cb0b23dce9519a13Massachusetts State AGfiled 2026-06-01(31d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-859-the-village-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 3e9bc4026811307f0fa853fcb039faca6bfa18a7325a2fead94a975c3db29ed7
Reporting entity
- Name
- The Village Banknorm: the village bank
Victim entity
- Name
- The Village Banknorm: the village bank
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.