Members Trust Company

Members Trust Company suffered a data breach on September 1, 2023, caused by an external system breach (hacking), compromising the personal information of 11,854 individuals, including 7 Maine residents. The incident was detected much later, on January 30, 2024, and notifications were issued to affected parties on November 19, 2024. While the exact type of exposed data was not specified, the company offered 12 months of Experian IdentityWorks Credit 3B identity theft protection, suggesting potential risks of financial fraud or identity misuse. The delayed discovery and notification period further heightened exposure risks for victims. The breach underscores vulnerabilities in the company’s cybersecurity defenses, particularly against external intrusion attempts targeting sensitive customer data.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4c312791-771d-4009-9c0d-8b2b799ca131.html

TPRM report: https://www.rankiteo.com/company/members-trust-company

"id": "mem1004091725",
"linkid": "members-trust-company",
"type": "Breach",
"date": "9/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 11854,
                        'industry': 'Banking/Trust Services',
                        'name': 'Members Trust Company',
                        'type': 'Financial Institution'}],
 'attack_vector': 'External System Breach (Hacking)',
 'customer_advisories': 'Notifications sent to affected individuals on '
                        '2024-11-19 with offer of identity theft protection '
                        'services',
 'data_breach': {'number_of_records_exposed': 11854,
                 'personally_identifiable_information': True},
 'date_detected': '2024-01-30',
 'date_publicly_disclosed': '2024-11-19',
 'description': 'The Maine Office of the Attorney General reported that '
                'Members Trust Company experienced a data breach on September '
                '1, 2023, due to an external system breach (hacking), '
                'affecting 11,854 individuals, including 7 residents of Maine. '
                'The breach was discovered on January 30, 2024, and '
                'notifications were sent to affected individuals on November '
                '19, 2024. Identity theft protection services (12 months of '
                'Experian IdentityWorks Credit 3B) were offered to the '
                'affected individuals.',
 'impact': {'brand_reputation_impact': 'Potential (due to breach notification)',
            'data_compromised': True,
            'identity_theft_risk': 'High (identity theft protection services '
                                   'offered)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notifications sent to affected '
                                        'individuals on 2024-11-19',
              'recovery_measures': 'Offered 12 months of Experian '
                                   'IdentityWorks Credit 3B to affected '
                                   'individuals'},
 'title': 'Members Trust Company Data Breach (2023)',
 'type': 'Data Breach'}