The Maine Office of the Attorney General reported that Village Bank experienced a data breach on January 13, 2023. The incident involved unauthorized access to an employee's email account through phishing, potentially affecting 1 Maine resident's personal information, including their Social Security number and financial account number. The breach was discovered on March 17, 2023, and notification was provided to the affected resident on May 17, 2023, including the offer of identity theft protection services through Equifax.
TPRM report: https://www.rankiteo.com/company/the-village-bank
"id": "the441072525",
"linkid": "the-village-bank",
"type": "Breach",
"date": "1/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 1,
'industry': 'Banking',
'location': 'Maine',
'name': 'Village Bank',
'type': 'Financial Institution'}],
'attack_vector': 'Phishing',
'data_breach': {'number_of_records_exposed': 1,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security number',
'financial account number']},
'date_detected': '2023-03-17',
'date_publicly_disclosed': '2023-05-17',
'description': "Unauthorized access to an employee's email account through "
"phishing, potentially affecting 1 Maine resident's personal "
'information, including their Social Security number and '
'financial account number.',
'impact': {'data_compromised': ['Social Security number',
'financial account number'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'communication_strategy': 'Notification to affected resident and '
'offer of identity theft protection '
'services',
'third_party_assistance': 'Equifax'},
'title': 'Village Bank Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Email Account'}