Limestone Bank Announces Data Breach After Unauthorized Actor Gains Access to Employee’s Email Account

Console and Associates, P.C.

On September 15, 2023, Limestone Bank, which is now known as Peoples Bank, filed a notice of data breach with the Attorney General of Maine after discovering unauthorized activity within an employee’s email account. In this notice, Limestone explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers and financial account numbers. Upon completing its investigation, Limestone began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Limestone Bank, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Limestone Bank data breach. For more information, please see our recent piece on the topic here.

What Caused the Limestone Bank Breach?

The Limestone Bank data breach was only recently announced, and more information is expected in the near future. However, Limestone’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, Limestone recently detected unusual activity within an employee’s email account. In response, Limestone Bank secured the account and then launched an investigation with the help of outside cybersecurity specialists.

The Limestone investigation confirmed that the affected email account showed signs of unauthorized access between November 21, 2022 and March 23, 2023. Subsequently, Limestone Bank determined that some of the emails and attachments contained confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, Limestone Bank reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number and financial account numbers.

On September 15, 2023, Limestone Bank sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

On April 30, 2023, Limestone Bank merged with Peoples Bank. However, this incident occurred before the merger.

More Information About Limestone Bank

Limestone Bank is a financial institution based in Louisville, Kentucky. The bank operates approximately 14 branches in metropolitan Louisville in Jefferson County. On April 30, 2023, Limestone Bank merged with Peoples Bank, a large bank with 132 branches in Ohio, Kentucky, West Virginia, Virginia, Washington D.C., and Maryland. Limestone Bank employs more than 222 people and generates approximately $52 million in annual revenue.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Console and Associates, P.C. | Attorney Advertising

Written by:

Console and Associates, P.C.

Console and Associates, P.C. on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide