The Vermont Office of the Attorney General reported on August 25, 2023, that Mascoma Bank experienced a data breach involving unauthorized access to customer data via a third-party service, MOVEit. The breach occurred on May 30, 2023, potentially compromising customer names and Social Security numbers. The exact number of affected individuals is currently unknown.
Source: https://ago.vermont.gov/document/2023-08-25-mascoma-bank-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/mascoma-bank
"id": "mas652072925",
"linkid": "mascoma-bank",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'name': 'Mascoma Bank',
'type': 'Bank'}],
'attack_vector': 'Third-party service',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Customer names',
'Social Security numbers']},
'date_detected': '2023-05-30',
'date_publicly_disclosed': '2023-08-25',
'description': 'Unauthorized access to customer data via a third-party '
'service, MOVEit.',
'impact': {'data_compromised': ['Customer names', 'Social Security numbers']},
'initial_access_broker': {'entry_point': 'MOVEit'},
'references': [{'date_accessed': '2023-08-25',
'source': 'Vermont Office of the Attorney General'}],
'title': 'Mascoma Bank Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'MOVEit'}