The Maine Office of the Attorney General disclosed a data breach at Texas Gulf Bank N.A. (TGB) on May 31, 2022, stemming from unauthorized access to two employee email accounts between January 13 and February 22, 2021. The incident compromised sensitive personal data of 12,358 individuals, including at least one Maine resident. Exposed information included names, Social Security numbers (SSNs), and account numbers, heightening risks of identity theft and financial fraud. In response, TGB offered one year of complimentary credit monitoring via IDX to affected parties. The breach originated from a targeted intrusion into employee accounts, likely through phishing or credential compromise, leading to the exfiltration of highly sensitive customer and employee-related financial data. The delayed public disclosure (over a year post-breach) further underscores operational and reputational risks for the bank.
TPRM report: https://www.rankiteo.com/company/texas-gulf-bank-n.a.
"id": "tex559082025",
"linkid": "texas-gulf-bank-n.a.",
"type": "Breach",
"date": "1/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '12,358',
'industry': 'Banking',
'location': 'Texas, USA',
'name': 'Texas Gulf Bank N.A. (TGB)',
'type': 'Financial Institution'}],
'attack_vector': 'Compromised Email Accounts',
'customer_advisories': ['Credit monitoring offered to affected individuals'],
'data_breach': {'data_exfiltration': 'Yes',
'file_types_exposed': ['Emails', 'Attachments (likely)'],
'number_of_records_exposed': '12,358',
'personally_identifiable_information': ['Name',
'Social Security '
'Number'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_publicly_disclosed': '2022-05-31',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Texas Gulf Bank N.A. (TGB) on May 31, 2022. '
'The unauthorized access to two employee email accounts '
'occurred between January 13 and February 22, 2021, affecting '
'approximately 12,358 individuals, including 1 Maine resident. '
"The breached information included the resident's name, Social "
'Security number, and account number. TGB is offering one year '
'of complimentary credit monitoring through IDX.',
'impact': {'data_compromised': ['Name',
'Social Security Number',
'Account Number'],
'identity_theft_risk': 'High (PII exposed)',
'payment_information_risk': 'Moderate (Account Numbers exposed)',
'systems_affected': ['Employee Email Accounts']},
'initial_access_broker': {'entry_point': ['Compromised Employee Email '
'Accounts']},
'references': [{'date_accessed': '2022-05-31',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': ['Notification to affected individuals '
'via Maine AG'],
'remediation_measures': ['Offered 1 year of complimentary credit '
'monitoring via IDX']},
'title': 'Texas Gulf Bank N.A. Data Breach via Unauthorized Email Access',
'type': 'Data Breach'}