HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Limestone Bank, Inc.

bd_e69f36a77ffb01dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 15, 2023

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

67%

Full breach record for Limestone Bank, Inc. →

Limestone Bank (now Peoples Bank) disclosed unauthorized access to an employee's email account between November 21, 2022, and March 23, 2023. The incident involved the compromise of valid credentials, leading to potential exposure of customer names, Social Security numbers, and financial account information. The bank engaged a cybersecurity firm, secured the account, and offered credit monitoring to affected individuals in multiple states, including Vermont and Rhode Island.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 21, 2022

Begins

Sep 15, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_205d103bb61afbcd2023-09-15Candidate
Indiana State AGbd_479cf63665e980622023-09-15Verified
Maine State AGbd_5d3b964d889a8c142023-09-15Verified
Massachusetts State AGbd_67b3b5c396b298342023-09-15Verified

Show 1 more filing ↓

New Hampshire State AGbd_c83686cdeac36a3f2023-09-15Verified

Name: Limestone Bank, Inc.
norm: limestone bank

Name: Limestone Bank, Inc.
norm: limestone bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Nov 21, 2022 – Mar 23, 2023
Materiality determined: —
Notification sent: Sep 15, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure the account
Engaged a cybersecurity firm to assist
Reviewed email and files in the affected account
Offering credit monitoring and identity protection services through Equifax Complete Premier at no cost
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGSep 15 · first

Indiana State AGSep 15 · first

Maine State AGSep 15 · first

Massachusetts State AGSep 15 · first

New Hampshire State AGSep 15 · first

Vermont State AGSep 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-09-15-limestone-bank-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2023
Raw hash: 608716f0a6e02df542637f2c67250a970dbe519c369160b6a3022555512bf94b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityLimestone Bank, Inc.

Victim entityLimestone Bank, Inc.

IncidentUnauthorized Access

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov