On July 18, 2023, Sound Community Bank filed a notice of potential data breach with the Attorney General of Maine after discovering that one of the company’s vendors used MOVEit to transfer Sound Community Bank customer information. As previously noted in similar posts, MOVEit was discovered to contain a vulnerability allowing hackers to access information stored within companies’ MOVEit servers. In this notice, Sound Community Bank explains that the incident resulted in an unauthorized party possibly being able to access consumers’ sensitive information, which includes their name, Social Security number, online banking username, address, email address, account number, date of birth, bill pay information, and account history. Upon completing its investigation, Sound Community Bank began sending out notification letters to all individuals whose information may have been affected by the recent data security incident.

If you receive a data breach notification from Sound Community Bank, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the incident involving Sound Community Bank. For more information, please see our recent piece on the topic here.

Why Is Sound Community Bank Sending a Data Breach Letter?

The potential data breach at Sound Community Bank was only recently announced, and more information is expected in the near future. However, Sound Community Bank’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, Sound Community Bank works with a vendor that uses MOVEit. On April 3, 2023, the vendor uploaded certain online banking information belonging to certain Sound Community Bank customers. On June 13, 2023, the vendor notified Sound Community Bank that certain customer information was transferred using the MOVEit program.

However, back in May 2023, Progress Software, the creator of MOVEit, announced a zero-day vulnerability within MOVEit which allowed unauthorized parties to access data stored in companies’ MOVEit servers.

While Sound Community Bank’s vendor indicated that the online banking data was only downloaded one time for the valid file transfer, it cannot rule out the possibility that hackers were able to infect the transfer and access the data.

After learning that sensitive consumer data may have been accessible to an unauthorized party, Sound Community Bank reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, online banking username, address, email address, account number, date of birth, bill pay information, and account history.

On July 18, 2023, Sound Community Bank sent out “Notice of Potential Data Breach” letters to anyone who was affected by the recent data security incident.

More Information About Sound Community Bank

Founded in 1953, Sound Community Bank is a financial institution located in Seattle, Washington. The bank manages nearly $1.5 in assets on behalf of over 25,000 businesses and households. Sound Community Bank operates eight branches and one loan production office. Sound Community Bank is owned and operated by Sound Financial Bancorp, Inc. Sound Community Bank employs more than 138 people and generates approximately $44 million in annual revenue.