The Maine Attorney General's Office disclosed a data breach affecting CNB Bank & Trust, stemming from unauthorized access to Fiserv’s MOVEit Transfer environment between May 27, 2023, and May 31, 2023. The incident resulted in the exposure of personal and financial account information, including names and account numbers, of four Maine residents. While the breach was contained to a third-party vendor’s system (Fiserv), the compromised data belonged to CNB Bank & Trust’s customers. Notification letters to affected individuals were scheduled for November 15, 2023, indicating a delayed response in informing victims. The breach highlights vulnerabilities in third-party file transfer platforms, which are frequently targeted by cybercriminals for sensitive financial data. No evidence suggests the exposed data was misused, but the incident poses risks of fraud, identity theft, or phishing attacks against the impacted customers. The bank’s reliance on external vendors for critical data transfers introduces additional layers of risk, emphasizing the need for stricter oversight and proactive security measures in supply chain cybersecurity.