Minnwest Bank, a financial institution with a branch in New Prague, fell victim to a check fraud scheme involving counterfeit checks. The fraudsters created fake versions of a legitimate check originally issued to 'ABC' and successfully cashed them through JP Morgan Chase (Michigan) and PNC Bank. The incident highlights a financial breach where unauthorized parties exploited weaknesses in check verification processes, leading to direct monetary losses for the bank and its customer (Dohm). The attack did not involve large-scale data exfiltration or systemic disruption but instead targeted financial transactions, leveraging forged documents to deceive banking systems. While the exact financial loss remains undisclosed, the incident erodes trust in the bank’s fraud detection mechanisms and exposes vulnerabilities in interbank check-clearing protocols. Customers may face delays in resolving disputed transactions, and the bank’s reputation suffers due to the failure to prevent a relatively basic yet effective fraud tactic. The case underscores the persistent risk of payment fraud in traditional banking operations, even without sophisticated cyber intrusions.
Source: https://www.startribune.com/us-postal-service-mail-theft-checks-surging-stealing/601156902
TPRM report: https://www.rankiteo.com/company/minnwestbank
"id": "min2375423102725",
"linkid": "minnwestbank",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 'at least one (Dohm)',
'industry': 'financial services',
'location': 'New Prague, Minnesota (branch location)',
'name': 'Minnwest Bank',
'type': 'regional bank'},
{'industry': 'financial services',
'location': 'Michigan (where counterfeit check was '
'cashed)',
'name': 'JP Morgan Chase',
'type': 'bank'},
{'industry': 'financial services',
'name': 'PNC Bank',
'type': 'bank'},
{'name': 'ABC (payee on original check)'}],
'attack_vector': 'check fraud / social engineering (likely via compromised '
'check details or mail interception)',
'customer_advisories': 'Minnwest Bank informed the affected customer (Dohm) '
'about the counterfeit checks.',
'data_breach': {'sensitivity_of_data': 'high (financial transaction details)',
'type_of_data_compromised': 'check details (account number, '
'routing number, payee, amount)'},
'description': 'Minnwest Bank reported that counterfeit checks, originally '
'made out to ABC, were fraudulently cashed by JP Morgan Chase '
'in Michigan and presented to PNC. The incident involved '
'unauthorized transactions using forged checks.',
'impact': {'brand_reputation_impact': 'potential reputational harm due to '
'fraud involving bank checks',
'customer_complaints': 'reported by affected customer (Dohm)',
'payment_information_risk': 'high (check details compromised)'},
'initial_access_broker': {'entry_point': 'likely physical (intercepted mail) '
'or digital (compromised check '
'printing system)',
'high_value_targets': 'check details of Minnwest '
'Bank customers'},
'investigation_status': 'ongoing (based on customer report)',
'motivation': 'financial gain',
'references': [{'source': 'Customer report (Dohm)'}],
'response': {'communication_strategy': 'customer notification (Dohm was '
'informed by Minnwest Bank)'},
'title': 'Counterfeit Check Fraud Incident at Minnwest Bank',
'type': 'fraud (counterfeit checks)'}