California International Bank

California International Bank disclosed a cybersecurity incident where an unauthorized individual gained access to an employee’s email account between September 11–12, 2024. After a thorough investigation (concluded on August 29, 2025), the bank confirmed that the compromised account may have contained customers' personal information, though no evidence of identity theft or fraudulent use was found. As a precaution, the bank is offering complimentary credit monitoring (Experian IdentityWorks), including $1M identity theft insurance, fraud alerts, security freezes, and free credit reports. Customers were advised to monitor financial statements and credit reports for irregularities. The breach highlights risks tied to phishing or credential compromise, exposing sensitive data without immediate malicious exploitation but necessitating proactive mitigation measures.

Source: https://dailyhodl.com/2025/09/27/bank-issues-data-breach-alert-to-customers-after-hacker-accesses-sensitive-personal-information/

TPRM report: https://www.rankiteo.com/company/calbanktrust

"id": "cal3892538092925",
"linkid": "calbanktrust",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'location': 'United States (Massachusetts, California)',
                        'name': 'California International Bank',
                        'type': 'Bank'}],
 'attack_vector': 'Unauthorized Access (Email Account Takeover)',
 'customer_advisories': ['Complimentary credit monitoring via Experian '
                         'IdentityWorks offered.',
                         'Free credit report provided.',
                         'Vigilance advised for fraudulent activity.'],
 'data_breach': {'file_types_exposed': ['Emails'],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate (Personal Information)',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2024-09-11',
 'date_publicly_disclosed': '2025-08-29',
 'description': 'A US bank, California International Bank, reported that an '
                'unauthorized individual accessed an employee’s email account '
                'between September 11, 2024, and September 12, 2024. The '
                "breach potentially exposed customers' personal information, "
                'though no evidence of identity theft or fraud has been '
                'detected. The bank is offering complimentary credit '
                'monitoring services via Experian IdentityWorks, including '
                'fraud alerts, security freezes, and $1 million in identity '
                'theft insurance.',
 'impact': {'brand_reputation_impact': 'Potential (Credit Monitoring Offered '
                                       'as Mitigation)',
            'data_compromised': ['Personal Information (unspecified)'],
            'identity_theft_risk': 'Low (No Evidence of Misuse)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'investigation_status': 'Completed (No Evidence of Misuse Found)',
 'recommendations': ['Customers advised to monitor financial statements and '
                     'credit reports for irregular activity.',
                     'Use of fraud alerts and security freezes recommended.'],
 'references': [{'source': 'The Daily Hodl'}],
 'regulatory_compliance': {'regulatory_notifications': ['Massachusetts State '
                                                        'Government']},
 'response': {'communication_strategy': ['Public Disclosure (Massachusetts '
                                         'State Filing)',
                                         'Customer Notifications',
                                         'Offer of Free Credit Reports'],
              'incident_response_plan_activated': True,
              'remediation_measures': ['Complimentary Credit Monitoring '
                                       'Services',
                                       'Fraud Alerts',
                                       'Security Freezes'],
              'third_party_assistance': ['Experian IdentityWorks (Credit '
                                         'Monitoring)']},
 'threat_actor': 'Unauthorized Individual',
 'title': 'California International Bank Email Account Breach Exposes Customer '
          'Data',
 'type': 'Data Breach (Email Account Compromise)'}