Northfield Bank

The Vermont Office of the Attorney General reported on September 25, 2023, a data breach involving Northfield Bank due to vulnerabilities in the MOVEit Transfer application, which occurred between May 27 and May 31, 2023. The compromise potentially affected customer names, account numbers, and Social Security numbers, although no passwords were involved. Approximately 1,500 individuals were affected by this incident.

Source: https://ago.vermont.gov/document/2023-09-25-northfield-bank-progress-software-moveit-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/northfield-savings-bank-vt

"id": "nor730072625",
"linkid": "northfield-savings-bank-vt",
"type": "Vulnerability",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1500,
                        'industry': 'Financial Services',
                        'name': 'Northfield Bank',
                        'type': 'Bank'}],
 'attack_vector': 'Vulnerability Exploitation',
 'data_breach': {'number_of_records_exposed': 1500,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['customer names',
                                              'account numbers',
                                              'Social Security numbers']},
 'date_detected': '2023-05-27',
 'date_publicly_disclosed': '2023-09-25',
 'description': 'The Vermont Office of the Attorney General reported on '
                'September 25, 2023, a data breach involving Northfield Bank '
                'due to vulnerabilities in the MOVEit Transfer application, '
                'which occurred between May 27 and May 31, 2023. The '
                'compromise potentially affected customer names, account '
                'numbers, and Social Security numbers, although no passwords '
                'were involved. Approximately 1,500 individuals were affected '
                'by this incident.',
 'impact': {'data_compromised': ['customer names',
                                 'account numbers',
                                 'Social Security numbers']},
 'references': [{'date_accessed': '2023-09-25',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Northfield Bank',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer application'}