BankGloucester

Bank Gloucester reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-17. 16 Massachusetts residents were affected.

BankGloucester reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-22. 17,231 Massachusetts residents were affected. The report records the breach type as electronic.

BankGloucester reported a third-party vendor data breach that affected 138 Maine residents. The breach was discovered on August 16, 2023, and occurred on May 30, 2023. The compromised data included financial account numbers or credit/debit card numbers in combination with security codes, access codes, or PINs. BankGloucester offered two years of credit monitoring and identity theft protection services through Equifax.

BankGloucester notified customers that a third-party vendor, Darling Consulting Group, was affected by the MOVEit Transfer vulnerability. The incident potentially exposed customer names, DOBs, SSNs, and account numbers. The bank launched an investigation and offered 2 years of Equifax credit monitoring.

BankGloucester notified the NH Attorney General of a security incident affecting 327 NH residents. The breach originated from a third-party vendor, Darling Consulting Group (DCG), which was compromised via the MOVEit Transfer software vulnerability (exploit_vuln) around May 30-31, 2023. BankGloucester detected the incident on July 12, 2023, upon notification from DCG. The investigation concluded on August 16, 2023, confirming the exposure of personal information. Notifications were mailed on August 22, 2023, offering 2 years of Equifax credit monitoring.

BankGloucester notified consumers of a data breach affecting its third-party vendor, Darling Consulting Group, which used Progress Software's MOVEit Transfer. The vulnerability, disclosed May 31, 2023, allowed unauthorized access to data including names, SSNs, DOBs, and account numbers. BankGloucester offered 2 years of Equifax credit monitoring. No evidence of misuse was found.