norm: nbt financialUSno LEI · no CIKMax severity: Low↳ subsidiary of NBT BANCORP INC

Canonical registry

NBT Financial

ent_5f9cf7ff6ca033f3da3ae454

Compliance scorecard →🔔 Follow entity

Disclosures

1

SEC 10-K Item 1C · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: NBT Financial
Normalized: nbt financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: nbt.bank
Corporate parent: NBT BANCORP INC— per SEC Exhibit 21 filing

Disclosure history (1)newest first

FEDERALSEC 10-K Item 1Cas reporting2026-02-27
NBT (Form 10-K Item 1C) discloses no known material cybersecurity incidents in the prior three fiscal years. The filing details a robust cybersecurity governance framework, including Board oversight via a Risk Management Committee, a designated Senior Director of Information Security (DISO), and an Incident Response Team (IRT). NBT employs a risk-based approach, NIST framework alignment, third-party audits, and cybersecurity insurance. No specific breach event, data exfiltration, or material impact is reported.