Social EngineeringFinancial ServicesFinancePhishingTargetedPIIIdentity (basic)LowContained

Paramount Bank

bd_ff86901b6a5c73e0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 26, 2019

Filed

Jun 23, 2020

To disclose

30 weeks

Affected

28state residents only

Linked

2 filings

Confidence

65%

Full breach record for Paramount Bank →

Paramount Bank notified Montana residents of unauthorized access to employee email accounts between November 2019 and February 2020. The incident involved phishing leading to credential compromise. Affected data included names and other PII. Paramount engaged third-party specialists, reset credentials, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 30 weeks / 210 days

Nov 26, 2019

Begins

Nov 26, 2019

Discovered

Jun 23, 2020

Filed

vs. sector median

+21 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7d6a5b1118c813fe2020-06-23Verified

Name: Paramount Bank
norm: paramount bank

Name: Paramount Bank
norm: paramount bank
Industry: Financial Servicesllm

Discovered: Nov 26, 2019
Breach occurred: Nov 26, 2019 – Feb 24, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 18, 2020
Affected individuals: 28state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Commenced an investigation with the assistance of third-party computer specialists
Changed the email account credentials
Investigated to confirm the security of our email network
Offering you access to identity theft protection services through TransUnion for twenty-four (24) months at no cost to you
Changes made: Reviewing existing policies and procedures
Conducting additional employee training
Implementing additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 23 · first

Montana State AGJun 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 23, 2020
Raw hash: 564652143f7714451b8ba6a3c7fbdff0c04943eba37029743952732fbf06322d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityParamount Bank

Victim entityParamount Bank

Incidentdiscovered Nov 26, 2019

Stated responseCommenced an investigation with the assistance of third-party computer specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov