Eagle Bank

On November 8, 2022, the Maine Office of the Attorney General disclosed a data breach affecting Eagle Bank, stemming from the unauthorized access to an employee’s email account. The incident, detected on September 20, 2022, exposed sensitive personal information, including Social Security numbers, of 511 individuals. The breach occurred due to hacking, compromising confidential data linked to the bank’s customers or employees. While the exact scope of the exploited information remains undisclosed beyond Social Security numbers, the exposure of such highly sensitive details poses significant risks, including identity theft, financial fraud, or targeted phishing attacks. The bank likely faced regulatory scrutiny and was required to notify affected individuals, offering credit monitoring or identity protection services as mitigation. The incident underscores vulnerabilities in email security protocols and the critical need for robust cybersecurity measures to prevent credential-based intrusions.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8a74608b-2a2b-44b1-92c0-8b29f30545af.shtml

TPRM report: https://www.rankiteo.com/company/eagle-bank-&-trust-co-

"id": "eag548091725",
"linkid": "eagle-bank-&-trust-co-",
"type": "Breach",
"date": "7/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 511,
                        'industry': 'Financial Services',
                        'location': 'Maine, USA',
                        'name': 'Eagle Bank',
                        'type': 'Bank'}],
 'attack_vector': 'Email Account Hacking',
 'data_breach': {'data_exfiltration': 'Potential',
                 'number_of_records_exposed': 511,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'personal information']},
 'date_detected': '2022-09-20',
 'date_publicly_disclosed': '2022-11-08',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Eagle Bank on November 8, 2022. The breach, '
                'discovered on September 20, 2022, involved hacking of an '
                'employee email account, potentially exposing the Social '
                'Security numbers and other personal information of 511 '
                'individuals.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'other personal information'],
            'identity_theft_risk': 'Potential (due to exposed SSNs)',
            'systems_affected': ['Employee email account']},
 'initial_access_broker': {'entry_point': 'Employee email account'},
 'references': [{'date_accessed': '2022-11-08',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Eagle Bank Employee Email Account Hacking Incident',
 'type': 'Data Breach'}