On May 4, 2021, the Maine Office of the Attorney General reported that Clear Mountain Bank (CMB) experienced a data breach due to unauthorized access to an employee's email account. The breach, which occurred between December 6, 2020, and December 7, 2020, potentially compromised the personal information of one Maine resident, including their Social Security number. CMB offered one year of identity monitoring services through Kroll to the affected individual.
TPRM report: https://www.rankiteo.com/company/clear-mountain-bank
"id": "cle639072625",
"linkid": "clear-mountain-bank",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 1,
'industry': 'Banking',
'location': 'Maine',
'name': 'Clear Mountain Bank',
'type': 'Financial Institution'}],
'attack_vector': 'Email Compromise',
'data_breach': {'number_of_records_exposed': 1,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Social Security Number']},
'date_detected': '2021-05-04',
'date_publicly_disclosed': '2021-05-04',
'description': "Unauthorized access to an employee's email account at Clear "
'Mountain Bank potentially compromised the personal '
'information of one Maine resident.',
'impact': {'data_compromised': ['Personal Information',
'Social Security Number'],
'identity_theft_risk': 'High',
'systems_affected': ['Email Account']},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'date_accessed': '2021-05-04',
'source': 'Maine Office of the Attorney General'}],
'response': {'remediation_measures': ['Identity Monitoring Services'],
'third_party_assistance': ['Kroll']},
'title': 'Clear Mountain Bank Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access'}