DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

GreatBanc Trust Company

bd_f89cba7178f45537 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 23, 2017

Filed

Jun 15, 2018

To disclose

34 weeks

Affected

21state residents only

Linked

5 filings

Confidence

66%
Full breach record for GreatBanc Trust Company

GreatBanc Trust Company reported that an unauthorized third party accessed an employee email account via a phishing scam during the week of October 23, 2017. The attacker attempted to redirect emails regarding wire transfers. Personal information, including names, addresses, dates of birth, and social security numbers, of approximately 21 New Hampshire residents may have been accessible. No evidence suggests emails were copied or transferred. GreatBanc implemented additional security measures, including two-factor authentication and security training.

Incident timeline

discovery → filing · 34 weeks / 235 days

Oct 23, 2017

Begins

Oct 23, 2017

Discovered

Jun 15, 2018

Filed

vs. sector median

+25 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGJun 15 · first
California State AGJun 15 · first
New Hampshire State AGJun 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.