HackingFinancial ServicesFinanceCustomer Data InvolvedPIIMediumContained

Evolve Bank & Trust

bd_e99bd73fd9a58721 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 30, 2024

To disclose

—

Affected

23,871state residents only

Linked

2 filings

Confidence

68%

Full breach record for Evolve Bank & Trust →7 incidents on file

Supplemental notice from Evolve Bank & Trust to New Hampshire AG regarding a security event. The bank identified approximately 23,871 additional NH residents affected. The bank had previously issued substitute notice on July 8, 2024, and is now notifying these residents directly where email is available.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 30, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Idaho State AGbd_5d351eadd915221a2024-09-03 · +4dVerified

Name: Evolve Bank & Trust
norm: evolve bank

Name: Evolve Bank & Trust
norm: evolve bank
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 23,871state-resident count only
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: follow up on notice dated July 8, 2024

During the incident: Detected and contained a security event
Providing substitute notice
Notifying these state residents directly where email address is available
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 30 · first · this page

Idaho State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/evolve-bank-trust-20240830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2024
Raw hash: 3f00e5a77331a0454b66ec63a17aac91df3ae80b7980cb88f53bf48c9a6b668b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEvolve Bank & Trust

Victim entityEvolve Bank & Trust

IncidentUnauthorized Access

Stated responseDetected and contained a security event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov