Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

First Bank

bd_e5fab92bf0bd76ad · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 2, 2020

Filed

Oct 20, 2020

To disclose

16 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for First Bank →7 incidents on file

First Bank notified Montana residents of unauthorized access to an employee's email account starting May 30, 2020, discovered July 2, 2020. Access was via phishing. Customer PII was potentially exposed. No evidence of viewing confirmed. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 16 weeks / 110 days

May 30, 2020

Begins

Jul 2, 2020

Discovered

Oct 20, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_29642318e27bbb3b2020-10-20Verified
Massachusetts State AGbd_99b0e949f12189262020-10-20Verified
New Hampshire State AGbd_8dde90d006ae46c62020-10-26 · +6dVerified

Name: First Bank
norm: first bank
Domain: myfirstbank.com

Name: First Bank
norm: first bank
Domain: myfirstbank.com
Industry: Financial Servicesllm

Discovered: Jul 2, 2020
Breach occurred: May 30, 2020
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2020
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Changed the employee’s email account credentials
Began an investigation into the incident
Conducted with the assistance of third-party forensic specialists
Offering you access to 1 year of complimentary credit monitoring and identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 20 · first

Massachusetts State AGOct 20 · first

Montana State AGOct 20 · first · this page

New Hampshire State AG+6d

Pattern: first filing Oct 20 (IN), last Oct 26 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/fbSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2020
Raw hash: df397ad2e7c1f08be5863cebeb13352b5e2b93999fa2e85ef2eaf7338943f763

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFirst Bank

Victim entityFirst Bank

Incidentdiscovered Jul 2, 2020

Stated responseChanged the employee’s email account credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov