River City Bank

The Maine Office of the Attorney General reported that River City Bank experienced a data breach on September 29, 2020, due to insider wrongdoing by a bank employee who downloaded customer data to a personal storage drive. The breach affected a total of 17,654 individuals, including the personal information of one Maine resident, specifically their financial account number, Social Security number, and name. Written notifications were sent out on November 20, 2020, and identity theft protection services were offered for two years through Kroll.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6cc9729d-fb7b-462e-89e9-654e22dcf7d4.shtml

TPRM report: https://www.rankiteo.com/company/river-city-bank

"id": "riv901072625",
"linkid": "river-city-bank",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 17654,
                        'industry': 'Banking',
                        'name': 'River City Bank',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Insider Threat',
 'customer_advisories': 'Identity theft protection services offered for two '
                        'years',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 17654,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial account number',
                                              'Social Security number',
                                              'Name']},
 'date_detected': '2020-09-29',
 'date_publicly_disclosed': '2020-11-20',
 'description': 'A data breach at River City Bank due to insider wrongdoing by '
                'a bank employee who downloaded customer data to a personal '
                'storage drive.',
 'impact': {'data_compromised': ['Financial account number',
                                 'Social Security number',
                                 'Name'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'motivation': 'Unknown',
 'post_incident_analysis': {'root_causes': 'Insider wrongdoing'},
 'references': [{'date_accessed': '2020-11-20',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notifications sent to '
                                        'affected individuals',
              'third_party_assistance': 'Kroll'},
 'threat_actor': 'Bank Employee',
 'title': 'River City Bank Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}