PhysicalFinancial ServicesFinanceSkimmerCustomer Data InvolvedTargetedPIIFINANCIALFINANCIAL_CREDENTIALSAUTHENTICATIONLowResolved
First National Bank
bd_f3c9690fe6e27aab · schema v1 · pii pii-v1
Full breach record for First National Bank →First National Bank (Damariscotta, ME) reported an ATM card skimming incident occurring September 21–29, 2024, discovered September 30, 2024. An unknown individual placed physical skimming devices on two of the bank's 22 ATMs, stealing debit card information including names, card numbers, expiration dates, PINs, and CVVs. 107 Maine residents were affected. The bank refunded all fraudulently withdrawn funds, cancelled and reissued debit cards, inspected all ATMs, and notified law enforcement.
Maine clockDiscovered Sep 30, 2024 → Filed with AG Oct 10, 202410d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed107 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/90f12ac4-f655-4029-9dd8-a5dc15f23231.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2024
- Raw hash
- 7712bd99a51908dc1037659a0eb6ac166be40cc586fef5e6e15b2550886ea9c5
Reporting entity
- Name
- First National Banknorm: first national bank
- Domain
- thefirst.com
- Industry
- Financial Services
Victim entity
- Name
- First National Banknorm: first national bank
- Domain
- thefirst.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Sep 30, 2024
- Materiality determined
- —
- Notification sent
- Oct 10, 2024
- Affected individuals
- 107
- Data types
- PIIFINANCIALFINANCIAL_CREDENTIALSAUTHENTICATION
- Attack vector
- Unknown
- MITRE ATT&CK
- T1056 Input Capture
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 30, 2024→ Filed with AG: Oct 10, 202410d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.