Mountain West Data Breach Exposes Sensitive Personal Information
Mountain West recently disclosed a potential data breach to the Massachusetts Attorney General’s office, revealing that sensitive personal identifiable information (PII) may have been compromised. While the company has not provided details on the nature of the security incident, the exposed data includes names and Social Security numbers, though the exact information affected varies by individual.
On December 18, 2025, Mountain West began notifying impacted individuals via mail, outlining the specific types of compromised data. As part of its response, the company is offering affected parties 24 months of complimentary credit monitoring services. The breach notification filed with Massachusetts authorities is available for review.
Source: https://straussborrelli.com/2025/12/22/mountain-west-commercial-data-breach-investigation/
Mountain West Bank cybersecurity rating report: https://www.rankiteo.com/company/mountain-west-bank
"id": "MOU1766434320",
"linkid": "mountain-west-bank",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'name': 'Mountain West',
'type': 'Organization'}],
'customer_advisories': 'Data breach notification letters sent to impacted '
'individuals with details of exposed information',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number']},
'date_publicly_disclosed': '2025-12-18',
'description': 'Mountain West reported that sensitive personal identifiable '
'information in its care may have been compromised. The breach '
'notice does not elaborate on the nature of the security '
'incident, but the type of information potentially exposed '
'includes names and Social Security numbers.',
'impact': {'data_compromised': 'Sensitive personal identifiable information',
'identity_theft_risk': 'High'},
'recommendations': '24 months of complimentary credit monitoring services for '
'affected individuals',
'references': [{'source': 'Attorney General of the Commonwealth of '
'Massachusetts'}],
'regulatory_compliance': {'regulatory_notifications': 'Notified Attorney '
'General of the '
'Commonwealth of '
'Massachusetts'},
'response': {'communication_strategy': 'Data breach notification letters '
'mailed to impacted individuals'},
'title': 'Mountain West Data Breach',
'type': 'Data Breach'}