HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
NVE Bank
bd_f724caf252adeb9c · schema v1 · pii pii-v1
Full breach record for NVE Bank →NVE Bank, a financial services entity based in Englewood, New Jersey, reported an external system breach (hacking) occurring on July 29, 2021, discovered on August 10, 2021. The incident compromised the names and Social Security Numbers of 19,039 individuals, including 22 Maine residents. NVE Bank sent written notifications on December 29, 2021, and provided one year of Experian Identity Works Credit 3B protection services to affected individuals.
Maine clockDiscovered Aug 10, 2021 → Filed with AG Dec 31, 2021143d ✗ ME AG >90d20 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e5c2bb842f77fb96Montana State AGfiled 2021-12-29(2d gap)Verified by operator
- bd_8d6834197faa1c08Maine State AGfiled 2021-11-03(58d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/be278dce-acb0-44ff-87ff-18283f785193.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 2021
- Raw hash
- f473bb543b580fc89a93c77178eff5160b33be2a4c3dfd9e5e623d00bda9b63e
Reporting entity
- Name
- NVE Banknorm: nve bank
- Industry
- Financial Services
Victim entity
- Name
- NVE Banknorm: nve bank
- Industry
- Financial Services
Incident
- Discovered
- Aug 10, 2021
- Materiality determined
- —
- Notification sent
- Dec 29, 2021
- Affected individuals
- 19,039
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- ME AG >90d · 143dME resident >60d · 141d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 10, 2021→ Filed with AG: Dec 31, 2021143d 90 days ME AG >90d Maine Discovered: Aug 10, 2021→ Notified: Dec 29, 2021141d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.