norm: orange bankUSLEI 5493005ONLDV0W4QDI82 · no CIKMax severity: Low

Canonical registry

Orange Bank &Trust Company

ent_01a06d14b4381d08d7b83f7b0b3f9218

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Orange Bank &Trust Company
Normalized: orange bank— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 5493005ONLDV0W4QDI82
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

Massachusetts State AGas victim2026-09-01
Orange Bank & Trust Company notified customers that a third-party vendor, Mercadien, P.C. CPAs, experienced a data security incident involving unauthorized access to Box.com files between September 17, 2025, and October 8, 2025. The incident affected customer information, including full names and potentially financial account data. OB&T engaged third-party experts, reset credentials, and offered credit monitoring. No evidence of misuse was found.