The Washington Trust Company

The Washington Trust Company (WTC) experienced a data breach between February 28, 2023, and March 2, 2023, when an unauthorized actor gained access to an employee’s email account. The breach exposed sensitive personal and financial information, including names, Social Security Numbers (SSNs), Driver’s License Numbers, and financial account details. At least one Maine resident was confirmed to be affected, though the total scope of impacted individuals remains undisclosed. The incident was reported to the Maine Attorney General’s Office on May 9, 2023, highlighting the potential risks of identity theft, financial fraud, and reputational damage for both the company and its clients. The breach underscores vulnerabilities in email security protocols, raising concerns about the protection of confidential customer and employee data within financial institutions.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/52daadea-e0d2-40f9-a89c-7164118fb8f4.shtml

TPRM report: https://www.rankiteo.com/company/the-washington-trust-company

"id": "the029090625",
"linkid": "the-washington-trust-company",
"type": "Breach",
"date": "2/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1 (Maine resident)',
                        'industry': 'Banking/Financial Services',
                        'name': 'The Washington Trust Company (WTC)',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Compromised Email Account',
 'customer_advisories': 'Notification sent to affected individual(s)',
 'data_breach': {'data_exfiltration': 'Potential',
                 'number_of_records_exposed': '1',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers',
                                                         'Driver’s License '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Information']},
 'date_publicly_disclosed': '2023-05-09',
 'description': "The Maine Attorney General's Office reported a data breach "
                'involving The Washington Trust Company (WTC) on May 9, 2023. '
                'The breach occurred between February 28, 2023, and March 2, '
                '2023, when an unauthorized actor accessed a WTC employee '
                'email account, potentially exposing names, Social Security '
                'Numbers, Driver’s License Numbers, and financial account '
                'information. One Maine resident was notified of the incident.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 'Driver’s License Numbers',
                                 'Financial Account Information'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'communication_strategy': 'Notification to Affected Individuals '
                                        "(via Maine Attorney General's "
                                        'Office)'},
 'threat_actor': 'Unauthorized Actor',
 'title': 'Data Breach at The Washington Trust Company (WTC)',
 'type': 'Data Breach'}