The Maine Attorney General's Office reported on August 7, 2023, that Stockman Bank experienced a data breach due to a vulnerability in Progress Software's MOVEit software, which was exploited between May 28, 2023, and May 31, 2023. The breach affected four Maine residents, exposing their names and financial account numbers or Social Security numbers. Stockman Bank is offering affected individuals a complimentary one-year membership to credit monitoring and identity theft protection services.
TPRM report: https://www.rankiteo.com/company/stockmanofmontana
"id": "sto539072725",
"linkid": "stockmanofmontana",
"type": "Vulnerability",
"date": "5/2023",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 4,
'industry': 'Financial Services',
'name': 'Stockman Bank',
'type': 'Bank'}],
'attack_vector': 'Exploitation of Vulnerability',
'data_breach': {'number_of_records_exposed': 4,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Financial account numbers',
'Social Security numbers']},
'date_detected': '2023-05-28',
'date_publicly_disclosed': '2023-08-07',
'description': 'Stockman Bank experienced a data breach due to a '
"vulnerability in Progress Software's MOVEit software, which "
'was exploited between May 28, 2023, and May 31, 2023. The '
'breach affected four Maine residents, exposing their names '
'and financial account numbers or Social Security numbers.',
'impact': {'data_compromised': ['Names',
'Financial account numbers',
'Social Security numbers'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'date_accessed': '2023-08-07',
'source': "Maine Attorney General's Office"}],
'response': {'communication_strategy': 'Offering complimentary one-year '
'membership to credit monitoring and '
'identity theft protection services'},
'title': 'Stockman Bank Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': "Progress Software's MOVEit software vulnerability"}