The Maine Office of the Attorney General reported a data breach involving First National Bank on October 10, 2024. The incident, which involved card skimming at two ATMs, affected 107 individuals who potentially had their debit card information compromised between late September 2024 and September 30, 2024.

The Vermont Office of the Attorney General disclosed a data incident involving First National Bank of Pennsylvania, stemming from a third-party vendor vulnerability around March 7, 2023. While the report confirmed that personal information may have been exposed, it did not specify the exact number of affected individuals or the types of data compromised (e.g., financial records, customer details, or employee information). Importantly, no confirmed cases of identity theft or fraud were reported at the time of disclosure, suggesting the breach did not immediately result in malicious exploitation of the exposed data. The incident highlights risks associated with third-party dependencies in financial institutions, where vendor vulnerabilities can indirectly compromise customer or operational data. The lack of confirmed fraud implies the exposure may have been contained or detected early, though the potential for misuse remains uncertain. The bank likely initiated investigations and mitigation measures, but the limited public details leave the full scope and long-term consequences unclear.

The Maine Office of the Attorney General reported on April 21, 2023, that First National Bank of Pennsylvania experienced a data breach involving inadvertent disclosure of personal information. The breach occurred on December 31, 2022, affecting a total of 26,225 individuals, including approximately two Maine residents. Identity theft protection services were offered for 12 months through Experian IdentityWorks.

The Maine Office of the Attorney General reported a data breach incident involving First National Bank of Pennsylvania on November 28, 2022. The breach occurred on October 6, 2022, and potentially affected approximately 15 Maine residents due to inadvertent disclosure of their names and account numbers on printed bank statements. The breach was discovered on approximately October 24, 2022.