NorthEast Community Bank

On May 27, 2023, NorthEast Community Bank experienced an external system breach (hacking) that led to a significant data compromise, reported to the Maine Office of the Attorney General on September 26, 2023. The incident potentially impacted 11,477 individuals, with 6 residents explicitly identified as affected. The exposed data included financial account numbers and debit/ATM card details, raising risks of fraud and identity theft. In response, the bank is providing 24 months of credit monitoring and identity theft restoration services via ChexSystems’ *OnAlert Essential Bundle* to mitigate harm. The breach underscores vulnerabilities in the bank’s external systems, exposing customers to financial exploitation and reputational damage. While no direct evidence of misuse has been confirmed, the scale and sensitivity of the leaked data warrant heightened vigilance. The bank’s proactive measures aim to restore trust, but the incident highlights the persistent threat of cyberattacks targeting financial institutions and their customers’ personal information.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f0ca733a-c8bd-4e62-a843-fbd1996af342.shtml

TPRM report: https://www.rankiteo.com/company/northeast-bank

"id": "nor029091825",
"linkid": "northeast-bank",
"type": "Cyber Attack",
"date": "5/2023",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 11477,
                        'industry': 'Financial Services',
                        'location': 'Maine, USA (likely broader, but reported '
                                    'by Maine AG)',
                        'name': 'NorthEast Community Bank',
                        'type': 'Bank'}],
 'attack_vector': 'External System Breach (Hacking)',
 'customer_advisories': ['24 months of credit monitoring and identity theft '
                         'restoration services offered'],
 'data_breach': {'number_of_records_exposed': 11477,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial account numbers',
                                              'Debit/ATM card numbers']},
 'date_detected': '2023-05-27',
 'date_publicly_disclosed': '2023-09-26',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving NorthEast Community Bank on September 26, '
                '2023. The breach occurred on May 27, 2023, due to an external '
                'system breach (hacking) that potentially affected 11,477 '
                'individuals, with 6 residents specifically identified. The '
                'compromised information may have included financial account '
                'numbers and debit/ATM card numbers. The bank is offering 24 '
                'months of credit monitoring and identity theft restoration '
                'services through the OnAlert Essential Bundle from '
                'ChexSystems.',
 'impact': {'data_compromised': ['Financial account numbers',
                                 'Debit/ATM card numbers'],
            'identity_theft_risk': 'High (credit monitoring offered)',
            'payment_information_risk': 'High (financial account and debit/ATM '
                                        'card numbers exposed)'},
 'references': [{'date_accessed': '2023-09-26',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'remediation_measures': ['24 months of credit monitoring',
                                       'Identity theft restoration services'],
              'third_party_assistance': ['ChexSystems (OnAlert Essential '
                                         'Bundle)']},
 'title': 'Data Breach at NorthEast Community Bank',
 'type': 'Data Breach'}