St. Mary’s Bank

The Maine Attorney General's Office reported a data breach involving St. Mary’s Bank on February 10, 2023. The breach occurred between December 12, 2022, and December 16, 2022, due to unauthorized access to an employee's Microsoft Office 365 email account, potentially exposing the names and Social Security numbers of two Maine residents.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/05ca146a-2d9d-4e25-b0da-d712d2342a9a.shtml

TPRM report: https://scoringcyber.rankiteo.com/company/st.-mary's-bank

"id": "st.528072725",
"linkid": "st.-mary's-bank",
"type": "Breach",
"date": "12/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 2,
                        'industry': 'Banking',
                        'location': 'Maine',
                        'name': 'St. Mary’s Bank',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 2,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers']},
 'date_detected': '2023-02-10',
 'date_publicly_disclosed': '2023-02-10',
 'description': "Unauthorized access to an employee's Microsoft Office 365 "
                'email account, potentially exposing the names and Social '
                'Security numbers of two Maine residents.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'systems_affected': ['Microsoft Office 365 Email Account']},
 'initial_access_broker': {'entry_point': 'Microsoft Office 365 Email Account'},
 'references': [{'date_accessed': '2023-02-10',
                 'source': "Maine Attorney General's Office"}],
 'title': 'Data Breach at St. Mary’s Bank',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Email Account'}