Central Bank

Commercial Finance Corporation, doing business as Central Bank, experienced an unauthorized access incident that affected 792 individuals, including one Maine resident. The breach occurred on July 1, 2022, and was discovered on September 23, 2023. The compromised information included names and Social Security numbers. The company began notifying affected individuals on December 5, 2023, and offered 24 months of identity theft protection services through Experian.

Central Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-08. 8 Massachusetts residents were affected. The report records the breach type as electronic.

Central Bank notified Montana residents of a security incident where an unauthorized person accessed files on servers on December 27, 2021. The incident involved personal information including SSNs. The bank engaged law enforcement and a cybersecurity firm, contained the incident, and offered one year of Kroll credit monitoring services.

Central Bank, a financial services organization, experienced an external system breach on December 27, 2021. The incident, discovered on February 15, 2022, affected 4,747 individuals. The compromised information included names combined with financial account numbers or credit/debit card numbers along with their respective security codes or PINs. Central Bank began notifying affected individuals in writing on March 8, 2022, and offered one year of identity monitoring services through Kroll.

Central Bank notified the New Hampshire Attorney General of a security incident involving unauthorized access to server files on December 27, 2021. The breach affected 18 New Hampshire residents, exposing names, Social Security numbers, and account numbers. Central Bank contained the incident, engaged outside cybersecurity and law enforcement, and began mailing notifications on March 8, 2022, offering one year of Kroll identity monitoring services.

Central Bank reported a data breach to the Indiana Attorney General. The breach occurred on 2021-12-27 and was reported on 2022-03-08. 22 Indiana residents were affected. 4,747 individuals affected in total.