First National Bank of Pennsylvania

The Vermont Office of the Attorney General disclosed a data incident involving First National Bank of Pennsylvania, stemming from a third-party vendor vulnerability around March 7, 2023. While the report confirmed that personal information may have been exposed, it did not specify the exact number of affected individuals or the types of data compromised (e.g., financial records, customer details, or employee information). Importantly, no confirmed cases of identity theft or fraud were reported at the time of disclosure, suggesting the breach did not immediately result in malicious exploitation of the exposed data. The incident highlights risks associated with third-party dependencies in financial institutions, where vendor vulnerabilities can indirectly compromise customer or operational data. The lack of confirmed fraud implies the exposure may have been contained or detected early, though the potential for misuse remains uncertain. The bank likely initiated investigations and mitigation measures, but the limited public details leave the full scope and long-term consequences unclear.

Source: https://ago.vermont.gov/document/2023-04-21-first-national-bank-pennsylvania-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/f-n-b--corporation

"id": "f-n952091725",
"linkid": "f-n-b--corporation",
"type": "Breach",
"date": "3/2023",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Financial Services',
                        'location': 'Pennsylvania, USA',
                        'name': 'First National Bank of Pennsylvania',
                        'type': 'Bank / Financial Institution'}],
 'data_breach': {'personally_identifiable_information': 'Potential '
                                                        '(unspecified)',
                 'type_of_data_compromised': 'Personal information '
                                             '(unspecified)'},
 'date_detected': '2023-03-07',
 'description': 'The Vermont Office of the Attorney General reported that '
                'First National Bank of Pennsylvania experienced a data '
                'incident involving personal information that may have been '
                'exposed due to a third-party vendor issue on or about March '
                '7, 2023. The report did not specify the number of individuals '
                'affected or identify any types of information compromised, as '
                'identity theft or fraud had not been confirmed.',
 'impact': {'data_compromised': 'Potential exposure of personal information '
                                '(unspecified)',
            'identity_theft_risk': 'Unconfirmed (no reports of identity theft '
                                   'or fraud)'},
 'investigation_status': 'Ongoing (no confirmation of identity theft or fraud)',
 'post_incident_analysis': {'root_causes': 'Third-party vendor issue'},
 'references': [{'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Reported by Vermont Office of the '
                                        'Attorney General'},
 'title': 'Data Incident at First National Bank of Pennsylvania via '
          'Third-Party Vendor',
 'type': 'Data Breach (Third-Party Vendor)'}