HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

UNITED BANK FINANCIAL CORPORATION

bd_de1e90daad67837d · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2020

Filed

Feb 24, 2021

To disclose

25 weeks

Affected

11state residents only

Linked

2 filings

Confidence

65%

Full breach record for UNITED BANK FINANCIAL CORPORATION →

United Bank Corporation notified Montana residents of a September 2020 cybersecurity incident where an unauthorized actor accessed network servers containing customer personal information. The bank secured the network, engaged forensic investigators, and offered one year of complimentary identity monitoring. Remediation included new password protocols and enhanced email security.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 176 days

Sep 1, 2020

Begins

Sep 1, 2020

Discovered

Feb 24, 2021

Filed

vs. sector median

+17 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_1389f9363bc2fd422021-02-24Candidate

Name: UNITED BANK FINANCIAL CORPORATION
norm: united bank financial

Name: UNITED BANK FINANCIAL CORPORATION
norm: united bank financial
Industry: Financial Servicesllm

Discovered: Sep 1, 2020
Breach occurred: Sep 1, 2020 – Sep 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 11, 2021
Affected individuals: 11state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a computer forensics firm to assist
Secured the network
Offered access to Kroll’s complimentary identity monitoring services for one year
Changes made: Implemented new password protocols
Limited external email access
Blocked access to malicious sites and IP addresses identified
Increased monitoring of network activity
Educated employees on how to identify and avoid malicious emails
Added new authentication measures for remote email access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGFeb 24 · first

Montana State AGFeb 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/uniSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2021
Raw hash: eb2744cf33089450119a601e6d9d71f5151ba8e11c038c200a9fc5db32db2d7b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityUNITED BANK FINANCIAL CORPORATION

Victim entityUNITED BANK FINANCIAL CORPORATION

Incidentdiscovered Sep 1, 2020

Stated responseEngaged a computer forensics firm to assist

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov