Commonwealth Trust Company
ent_284d3a4bff4276d9843c432b
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Commonwealth Trust Company
- Normalized
- commonwealth trust— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- commonwealth-trust.com
Disclosure history (3)newest first
- New Hampshire State AGas victim2025-09-22
Commonwealth Trust Company notified the NH Attorney General that an unauthorized actor accessed an employee email account on May 13, 2025. The incident affected 4 New Hampshire residents, exposing names, SSNs, financial account info, and PHI (medical records, prescriptions). The company secured the account, investigated, and offered 24 months of credit monitoring.
- Nebraska State AGas victim2025-09-19
Commonwealth Trust Company (CTC) notified Nebraska AG of a phishing incident affecting one Nebraska resident. An unauthorized actor accessed an employee email account on May 13, 2025, exfiltrating names, SSNs, and PHI. CTC discovered the breach on May 13, completed its review on August 4, and sent notices on September 19, 2025. Remediation included credit monitoring and enhanced security measures.
- Massachusetts State AGas victim2025-09-19
Commonwealth Trust Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-09-19. 7 Massachusetts residents were affected.