🦞Maine State AGFirst filing
Filed Jun 11, 2026bd_c06d97bcd6201e96
Orrstown Bank reported a third-party data breach involving its advisory services provider, Mercadien, P.C. The incident, occurring on September 17, 2025, and discovered on May 21, 2026, affected approximately 83,938 individuals, including 16 Maine residents. Compromised data included names, dates of birth, SSNs, account numbers, and government IDs. Orrstown Bank notified affected individuals on June 11, 2026, and provided 24 months of credit monitoring via Experian.
Affected (this filing): 83,938
ME AG ≤30d · 21d