Centennial Bank

The Washington State Office of the Attorney General disclosed a data breach at Centennial Bank, occurring between April 6–7, 2023, but reported on April 19, 2024. Unauthorized actors gained access to the bank’s computer network, compromising the personal details of 3,044 Washington residents. The exposed data included highly sensitive information such as names, Social Security numbers, financial records, and driver’s license numbers. The breach poses significant risks, including identity theft, financial fraud, and long-term reputational damage for both the bank and affected individuals. Given the nature of the stolen data—particularly Social Security and financial information—the incident falls under a high-severity category, as such details are prime targets for cybercriminals. The delayed disclosure (nearly a year later) may further exacerbate trust issues among customers and regulators. While the exact method of intrusion remains undisclosed, the scale and sensitivity of the leaked data suggest a targeted cyber intrusion, likely aimed at exploiting personal and financial records for malicious purposes. The bank is now obligated to implement remediation measures, including credit monitoring for victims, system audits, and enhanced security protocols to prevent future incidents.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=16717

TPRM report: https://www.rankiteo.com/company/my100bank

"id": "my1720082025",
"linkid": "my100bank",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '3,044',
                        'industry': 'Banking',
                        'location': 'United States (Washington residents '
                                    'affected)',
                        'name': 'Centennial Bank',
                        'type': 'Financial Institution'}],
 'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
                 'number_of_records_exposed': '3,044',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         "driver's license "
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Information']},
 'date_publicly_disclosed': '2024-04-19',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Centennial Bank. The breach occurred '
                'between April 6 and April 7, 2023, involving unauthorized '
                "access to Centennial's computer network, potentially "
                'affecting the personal details of 3,044 Washington residents, '
                'including names, Social Security numbers, financial '
                "information, and driver's license numbers.",
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial information',
                                 "driver's license numbers"],
            'identity_theft_risk': 'High (PII exposed)',
            'payment_information_risk': 'High (financial information exposed)',
            'systems_affected': ['computer network']},
 'references': [{'date_accessed': '2024-04-19',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Centennial Bank Data Breach (2023)',
 'type': 'Data Breach'}