Sound Community Bank

Sound Financial Bancorp disclosed that its subsidiary Sound Community Bank was affected by the MOVEit Transfer zero-day vulnerability (Progress Software) via a third-party vendor providing account hosting and transaction processing. The vendor used MOVEit to transfer data on approximately 16,000 of the Bank's mobile and online banking customers. Vendor forensics indicate the data was downloaded once during a valid transfer; investigation ongoing. Law enforcement and banking regulators notified.

Affected (this filing): 16,000

Sound Community Bank, a financial services organization, reported an external system breach (hacking) that occurred between April 3, 2023, and May 31, 2023. The breach was discovered on June 13, 2023, and affected 3 Maine residents. The compromised information included names and Social Security numbers. Affected individuals were notified on July 18, 2023, and offered 24 months of identity theft protection services through OnAlert Essential Bundle from ChexSystems. The notification was submitted by outside counsel to Fidelity National Information Services, Inc., indicating a third-party vendor was involved.

Affected (this filing): 3