Webster Bank, National Association
ent_019e2320dae1a3eb5850ceec1ff93bed
Disclosures
12
State AG · 4 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
191,563
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Webster Bank, National Association
- Normalized
- webster bank national— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- WV0OVGBTLUP1XIUJE722
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Webster Financial Corporation— per GLEIF relationship records
Disclosure history (12)newest first
- New Hampshire State AGas victim2023-11-27
FIS reported a data security incident involving its third-party vendor Progress Software's MOVEit Transfer tool. A zero-day vulnerability allowed an unauthorized third party to access files transferred from Webster Bank's client, the New Bedford Retirement Board. The incident affected 9 New Hampshire residents, exposing names and financial account/routing numbers. FIS disabled the tool, patched systems, and engaged law enforcement and forensic experts.
- New Hampshire State AGas victim2023-05-03
Webster Bank NA filed a supplemental notice with the New Hampshire Attorney General regarding a data breach involving third-party vendor Guardian Analytics, Inc. Unauthorized third parties accessed Guardian's systems between November 27, 2022, and January 22, 2023, exfiltrating client personal information. Webster learned of the incident on January 26, 2023. The notice covers 16 additional New Hampshire residents. Webster offered 24 months of Experian IdentityWorks.
- Maine State AGas victim2023-04-28
Webster Bank, N.A. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred between November 27, 2022, and January 22, 2023. The breach was discovered on January 27, 2023. The compromised information includes names and Social Security numbers. The incident affected 22 Maine residents. Webster Bank offered 24 months of identity theft protection services through Experian to those affected.
- New Hampshire State AGas victim2023-04-12
Webster Bank, N.A. notified the New Hampshire Attorney General of a third-party vendor breach involving Guardian Analytics, Inc. A ransomware attack (Daixin/LockBit) on Guardian's systems between Nov 27, 2022 and Jan 17, 2023 resulted in the exfiltration and encryption of Webster customer data. Webster discovered the incident on Jan 26, 2023. 348 New Hampshire residents were affected, with data including names, account numbers, and potentially SSNs. Webster offered 24 months of credit monitoring.
- Massachusetts State AGas victim2023-04-10
Webster Bank, NA reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-10. 21,052 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2023-04-10
Webster Bank, N.A. identified a security breach that affected its systems between November 27, 2022, and January 22, 2023. The breach was discovered on January 27, 2023. The incident involved an external party hacking into the bank's systems and acquiring personal information, including names and Social Security numbers. A total of 191,563 individuals were affected, with 240 of them being residents of Maine. Webster Bank began notifying the affected individuals on April 10, 2023, and offered them 24 months of identity theft protection services through Experian.
- Indiana State AGas victim2020-01-03
Webster Bank N A reported a data breach to the Indiana Attorney General. The breach occurred on 2019-12-18 and was reported on 2020-01-03. 1 Indiana residents were affected.
- Massachusetts State AGas victim2017-03-13
Webster Bank, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-13. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2014-05-29
Webster Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-05-29. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2014-05-29
Webster Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-05-29. 279 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2014-05-29
Webster Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-05-29. 3 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2011-10-27
Webster Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-10-27. 15 Massachusetts residents were affected. The report records the breach type as electronic.
Supply-chain cascadesreviewed and confirmed
- Webster Bank, National Association’s filing is one of at least 97 in the Progress Software Corporation supply-chain incident (2023).