Community Trust Bank, Inc.

Community Trust Bank, Inc. (CTBI) notified the NH AG of a data incident involving its service provider FIS and third-party vendor Progress Software's MOVEit Transfer. An unauthorized party exploited a zero-day vulnerability to access files containing customer PII (names, SSNs, etc.) on May 29-30, 2023. FIS discovered the breach on August 9, 2023. 6 NH residents are affected. Notifications and credit monitoring were offered.

Community Trust Bank reported a data breach caused by an external hacking incident that occurred on May 27, 2023. The breach was discovered on August 9, 2023, and affected 2 Maine residents. The compromised information includes names and financial account numbers with associated access codes or PINs. The notification was submitted by outside counsel for Fidelity National Information Services, Inc., indicating a third-party vendor was involved in the incident. Affected individuals were notified on September 8, 2023, and offered 24 months of identity theft protection services.

Community Trust Bank, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-09-08. 764 Indiana residents were affected. 99,389 individuals affected in total.

Community Trust Bank, Inc. notified customers of a data security event involving its service provider, FIS, and MOVEit Transfer software. A zero-day vulnerability in MOVEit was exploited by unauthorized actors between May 30 and July 30, 2023. Personal information was accessed. FIS discovered the access on July 24, 2023. Bank systems were not compromised. Credit monitoring offered.