United Bank

In late September 2020, United Bank suffered a cybersecurity breach where unauthorized actors gained access to its network servers. The incident, reported by the Maine Attorney General's Office on February 24, 2021, exposed the personal data of nine Maine residents, including names and Social Security numbers. While the breach involved sensitive information, there was no confirmed misuse of the exposed data at the time of reporting. The attack targeted internal systems, raising concerns about data protection protocols and potential vulnerabilities in the bank’s cybersecurity infrastructure. The limited scope of affected individuals (nine residents) and the absence of confirmed fraudulent activity suggest the breach was contained, but the exposure of Social Security numbers highly sensitive identifiers poses long-term risks such as identity theft or financial fraud. The bank likely faced reputational damage and regulatory scrutiny, though the incident did not escalate to broader operational disruptions or financial losses for customers beyond the initial data exposure.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/014c98f3-228d-406c-bd82-223e130035d7.shtml

TPRM report: https://www.rankiteo.com/company/united-bank-of-southwest-alabama-&-northwest-florida

"id": "uni222090125",
"linkid": "united-bank-of-southwest-alabama-&-northwest-florida",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '9 (Maine residents)',
                        'industry': 'Banking',
                        'location': ['Maine', 'United States'],
                        'name': 'United Bank',
                        'type': 'Financial Institution'}],
 'data_breach': {'number_of_records_exposed': '9',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes Social Security '
                                        'numbers)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2020-09',
 'date_publicly_disclosed': '2021-02-24',
 'description': "The Maine Attorney General's Office reported that United Bank "
                'experienced a cybersecurity incident in late September 2020, '
                'involving unauthorized access to network servers. The '
                'incident potentially exposed personal information, including '
                'names and Social Security numbers, of nine Maine residents. '
                'No misuse of the exposed information has been confirmed as of '
                'the report date.',
 'impact': {'data_compromised': ['names', 'Social Security numbers'],
            'identity_theft_risk': 'Potential (no confirmed misuse)',
            'systems_affected': ['network servers']},
 'investigation_status': 'Ongoing (no confirmed misuse of data as of report '
                         'date)',
 'references': [{'date_accessed': '2021-02-24',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'communication_strategy': "Reported to Maine Attorney General's "
                                        'Office'},
 'title': 'Unauthorized Access to United Bank Network Servers',
 'type': 'Unauthorized Access / Data Breach'}