Orrstown Bank
ent_019e628717dea06a3ebfa2806a86a34e
Disclosures
6
State AG · 6 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
83,938
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Orrstown Bank
- Normalized
- orrstown bank— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 54930060KLIQD8MMSB55
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- ⛰️New Hampshire State AGas victim2026-06-15
Orrstown Bank notified the New Hampshire Attorney General on June 11, 2026, of a data security incident involving its third-party vendor, Mercadien, P.C. CPAs. On May 21, 2026, Mercadien experienced unauthorized access to sensitive personal information belonging to 19 New Hampshire residents. Orrstown's own systems were not compromised. The incident involved names, dates of birth, addresses, SSNs, account numbers, and government IDs. No misuse has been identified. Orrstown offered 24 months of identity theft protection via Experian.
- 🍁Vermont State AGas victim2026-06-12
Orrstown Bank reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-12. The reporting organization type is Financial Services. 11 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info.
- 🏎️Indiana State AGas victim2026-06-11
Orrstown Bank reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-17 and was reported on 2026-06-11. 40 Indiana residents were affected. 83,938 individuals affected in total.
- 🦞Maine State AGas victim2026-06-11
Orrstown Bank reported a third-party data breach involving its advisory services provider, Mercadien, P.C. The incident, occurring on September 17, 2025, and discovered on May 21, 2026, affected approximately 83,938 individuals, including 16 Maine residents. Compromised data included names, dates of birth, SSNs, account numbers, and government IDs. Orrstown Bank notified affected individuals on June 11, 2026, and provided 24 months of credit monitoring via Experian.
- 🏛️Massachusetts State AGas reporting2026-06-01
Orrstown Bank notified Massachusetts residents of a data security incident involving its third-party advisor, Mercadien, P.C. The incident, discovered on or about May 21, 2026, potentially exposed personal information including names, dates of birth, SSNs, account numbers, and government IDs. No evidence of misuse was found. The Bank provided 24 months of free credit monitoring via Experian IdentityWorks.
- 🦬Montana State AGas victim2018-08-28
Orrstown Bank reported a data breach to the Montana Attorney General. The breach was reported on 2018-08-28. The breach occurred from 10/3/2017 to 7/17/2018. 5 Montana residents were affected.