Union Bank and Trust Company
ent_019e2336a08d8ac6ca2fad8e5788adec
Disclosures
8
State AG · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
204,291
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Union Bank and Trust Company
- Normalized
- union bank and— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- R6KJ2D7C3UT8OVTWHS39
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (8)newest first
- New Hampshire State AGas victim2023-07-05
Union Bank and Trust Company (UBT) notified the New Hampshire Attorney General of a data event affecting 27 NH residents. UBT was notified by Progress Software on May 31, 2023, of a zero-day vulnerability in MOVEit Transfer software. Unauthorized access to customer information occurred on May 29, 2023. UBT took the application offline, engaged forensic specialists, notified law enforcement, and issued credit monitoring services to affected individuals.
- Massachusetts State AGas victim2023-06-30
Union Bank and Trust Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-30. 121 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-06-30
Union Bank and Trust Company notified Montana residents of a security incident involving its MOVEit Transfer application. A zero-day vulnerability in Progress Software's MOVEit Transfer was exploited on May 29, 2023, leading to unauthorized access to customer names and data elements. UBT took the application offline, engaged forensic specialists, notified law enforcement, and applied a security patch. Free identity monitoring was offered for 12 months.
- Maine State AGas victim2023-06-30
Union Bank and Trust Company reported an external system breach that occurred on May 29, 2023. The breach was discovered on June 9, 2023, and affected 39 Maine residents. The compromised information included names and Social Security Numbers. The company provided written notification to affected individuals on June 30, 2023, and offered 12 months of credit monitoring and identity restoration services through Kroll.
- California State AGas victim2023-06-30
Union Bank and Trust Company notified customers that their information was subject to unauthorized access on May 29, 2023, due to the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer application. The bank took the application offline, engaged forensic specialists, and reported the incident to federal law enforcement. Affected data includes names and other data elements. The bank is offering 12 months of identity monitoring through Kroll.
- Indiana State AGas victim2023-06-30
Union Bank and Trust Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-06-30. 152 Indiana residents were affected. 204,291 individuals affected in total.
- Vermont State AGas victim2023-06-29
Union Bank and Trust Company notified consumers of a data breach involving the MOVEit Transfer software provided by Progress Software. A zero-day vulnerability was exploited on May 29, 2023, leading to unauthorized access to customer names and government-issued ID data. UBT took the application offline, engaged forensic specialists, notified federal law enforcement, and applied a security patch. Free identity monitoring was offered to affected individuals.
- Illinois State AGas victim2023-01-01
UNION BANK AND TRUST COMPANY filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-432). The register records the breach as discovered on May 31, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
Supply-chain cascadesreviewed and confirmed
- Union Bank and Trust Company’s filing is one of at least 97 in the Progress Software Corporation supply-chain incident (2023).