TBK Bank, SSB suffered a data security breach through an unauthorized activity on an employee’s email account.
The breach exposed the names, addresses, Social Security numbers, and bank account information of certain customers.
TBK Bank secured the email account and then investigated the incident and send out the data breach notification to the affected persons.
Source: https://www.jdsupra.com/legalnews/data-breach-alert-tbk-bank-ssb-3819974/
TPRM report: https://scoringcyber.rankiteo.com/company/tbk-bank
"id": "tbk13181522",
"linkid": "tbk-bank",
"type": "Breach",
"date": "03/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'name': 'TBK Bank, SSB',
'type': 'Bank'}],
'attack_vector': 'Unauthorized Email Access',
'customer_advisories': 'Data breach notifications sent',
'data_breach': {'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Social Security Numbers',
'Bank Account Information']},
'description': 'TBK Bank, SSB suffered a data security breach through an '
'unauthorized activity on an employee’s email account. The '
'breach exposed the names, addresses, Social Security numbers, '
'and bank account information of certain customers. TBK Bank '
'secured the email account, investigated the incident, and '
'sent out data breach notifications to the affected persons.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Social Security Numbers',
'Bank Account Information'],
'systems_affected': ['Employee Email Account']},
'initial_access_broker': {'entry_point': 'Employee Email Account'},
'investigation_status': 'Completed',
'response': {'communication_strategy': ['Sent out data breach notifications '
'to the affected persons'],
'containment_measures': ['Secured the email account'],
'remediation_measures': ['Investigated the incident']},
'title': 'TBK Bank Data Security Breach',
'type': 'Data Breach'}