Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIICREDENTIALSFINANCIAL_ACCOUNTLowContained
Maple City Savings Bank, FSB
bd_fb09eb28d59c3a1c · schema v1 · pii pii-v1
Full breach record for Maple City Savings Bank, FSB →Maple City Savings Bank, FSB notified consumers of a data security incident where unauthorized access to employee email accounts occurred between April 12 and April 23, 2024. The attacker likely intended to divert funds but may have accessed emails containing customer data. The bank offered one year of complimentary identity monitoring services through IDX.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6a2b19f5ac780de2Maine State AGfiled 2024-08-16Candidate
- bd_e7e08e3e408b8bb6New Hampshire State AGfiled 2024-08-16Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-16-maple-city-savings-bank-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- c274f440b03159a6867206ab0ed0da983ce50ae8957f45d4bd209da8a7ee3a02
Reporting entity
- Name
- Maple City Savings Bank, FSBnorm: maple city savings bank fsb
Victim entity
- Name
- Maple City Savings Bank, FSBnorm: maple city savings bank fsb
Incident
- Discovered
- Apr 12, 2024
- Materiality determined
- Aug 7, 2024
- Notification sent
- Aug 16, 2024
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 18 weeks(126 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.