HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)LowContained

Primis Bank

bd_db0235daa743179e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 24, 2023

Filed

Aug 24, 2023

To disclose

4 weeks

Affected

12state residents only

Linked

5 filings

Confidence

65%

Full breach record for Primis Bank →

Primis Bank notified Montana residents of a third-party data breach involving vendor Darling Consulting Group. Between May 30-31, 2023, an unauthorized actor downloaded files from Darling's systems using the MOVEit vulnerability. Primis's systems were not directly compromised. The incident may have exposed names and other personal information. Primis offered complimentary identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 55 days

discovery → filing · 4 weeks / 31 days

May 30, 2023

Begins

Jul 24, 2023

Discovered

Aug 24, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Part of Darling Consulting Group supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_6ecc0b57436266fe2023-08-24Verified
Maine State AGbd_a8bbcd974af078be2023-08-24Candidate
New Hampshire State AGbd_c07f6e12ea145ee62023-08-24Verified
Massachusetts State AGbd_e35e9dba7c75c8712023-08-24Verified

Name: Primis Bank
norm: primis bank

Name: Primis Bank
norm: primis bank
Industry: Financial Servicesllm

Discovered: Jul 24, 2023
Breach occurred: May 30, 2023 – May 31, 2023
Undetected for: 55 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 24, 2023
Affected individuals: 12state-resident count only
Data types: Identity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Darling Consulting Group
Initial access: supply_chain

During the incident: Conducted a detailed review of the impacted files
Arranged to provide formal notification to affected individuals
Offering complimentary identity theft protection services through IDX
Evaluating alternative file sharing platforms
Evaluating additional safeguards to enhance security of information transmitted externally
Changes made: Evaluating alternative file sharing platforms
Evaluating additional safeguards to enhance security of information transmitted externally
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGAug 24 · first

Maine State AGAug 24 · first

New Hampshire State AGAug 24 · first

Massachusetts State AGAug 24 · first

Montana State AGAug 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-596.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2023
Raw hash: a55854a3a6bef84e0620603d87eb2fb30faaf1aeedc850ceb4f4153b19cb0dea

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPrimis Bank

Victim entityPrimis Bank

Incidentdiscovered Jul 24, 2023

Stated responseConducted a detailed review of the impacted files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov