MalwareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Tri Counties Bank
bd_f2b2a26ac629eb7b · schema v1 · pii pii-v1
Full breach record for Tri Counties Bank →Tri Counties Bank experienced a malware incident on February 7-8, 2023, where an unauthorized actor accessed systems storing personal information. The malware prevented access to certain files. Affected data includes names and likely Social Security numbers for customers, employees, and affiliates. The bank shut down systems, notified law enforcement and regulators, and offered 24 months of credit monitoring.
California clockDiscovered Feb 7, 2023 → Notified Oct 12, 2023247d ✗ CA 60-day late35 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_8a1c05db9a0376c6Leak Siteblack_bastafiled 2023-03-19(206d gap)Candidate
Regulatory filings (1) · sorted by filing gap
- bd_1297d2dd698bf712SEC 8-Kfiled 2023-10-13(1d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-575067
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2023
- Raw hash
- 4bf142fa2e8a5e403d639111c82bc3b11761fdb11ef27a04d2adafa4968aac38
Reporting entity
- Name
- Tri Counties Banknorm: tri counties bank
- Domain
- tcbk.com
Victim entity
- Name
- Tri Counties Banknorm: tri counties bank
- Domain
- tcbk.com
Incident
- Discovered
- Feb 7, 2023
- Materiality determined
- —
- Notification sent
- Oct 12, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Notified applicable regulatory authorities
Compliance
- Time to disclose
- 35 weeks(247 days from discovery to filing)
- Compliance flags
- CA 60-day late · 247d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 7, 2023→ Notified: Oct 12, 2023247d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.