PhysicalFinancial ServicesFinanceSkimmerCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Santander Bank, N.A.

bd_ec19e0e41595b147 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 17, 2016

Filed

Aug 1, 2016

To disclose

15 days

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Santander Bank, N.A. →24 incidents on file

Santander Bank notified the NH Attorney General of a physical skimming incident at an ATM in Lexington, MA. The skimming device was active between May 27 and June 5, 2016. One NH resident was affected. Santander closed impacted cards, reissued new ones, and is cooperating with the Secret Service.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 51 days

discovery → filing · 15 days

May 27, 2016

Begins

Jul 17, 2016

Discovered

Aug 1, 2016

Filed

vs. sector median

6 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a5497aebd5b07a962016-08-04 · +3dVerified
Massachusetts State AGbd_4e7aeff8dd9561832016-08-05 · +4dVerified
Massachusetts State AGbd_7a2e1a5bb1a4df102016-09-12 · +42dCandidate

Name: Santander Bank, N.A.
norm: santander bank na

Name: Santander Bank, N.A.
norm: santander bank na
Industry: Financial Servicesllm

Discovered: Jul 17, 2016
Breach occurred: May 27, 2016 – Jun 5, 2016
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unknown
MITRE ATT&CK: T1562.001 Hardware Additions or Modifications
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralWorking closely with the United States Secret Service

During the incident: The cards for all impacted individuals were immediately closed and new cards were reissued
The Bank is working closely with the United States Secret Service
Continuing to monitor Santander Bank ATMs and vestibule doors and suspicious customer electronic transactions
Changes made: Continuing to monitor Santander Bank ATMs and vestibule doors and suspicious customer electronic transactions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 1 · first · this page

Massachusetts State AG+3d

Massachusetts State AG+4d

Massachusetts State AG+42d

Pattern: first filing Aug 1 (NH), last Sep 12 (MA) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/santander-20160801.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2016
Raw hash: ee9a16c7b70133b925cbd156e6dbdc624cc2d5b130f3122f6198877e660bda1e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySantander Bank, N.A.

Victim entitySantander Bank, N.A.

Incidentdiscovered Jul 17, 2016

Stated responseThe cards for all impacted individuals were immediately closed and new cards were reissued

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov