The Maine Office of the Attorney General reported a data breach involving Summit National Bank on August 16, 2024. The breach was discovered on July 12, 2024, and involved unauthorized access to an email account between May 13 and May 16, 2024, potentially affecting 10,912 individuals. The compromised data included personal information such as names, Social Security numbers, and financial account details.

The California Office of the Attorney General disclosed a data breach at Summit State Bank on March 28, 2024, stemming from unauthorized access to an employee’s email account between October 16, 2023, and October 25, 2023. The incident exposed personal information of affected individuals, though the exact nature and scope of the compromised data (e.g., financial records, customer details, or employee records) were not explicitly detailed in the report. The breach highlights vulnerabilities in email security protocols, potentially enabling threat actors to exploit sensitive communications or attached documents. While the bank likely initiated containment measures—such as securing the account, investigating the intrusion, and notifying regulators—the incident underscores risks associated with phishing, credential theft, or insider negligence. The exposure of personal data could lead to downstream consequences, including identity theft, fraud, or reputational harm for both the bank and the impacted individuals. No evidence suggests ransomware or systemic disruption, but the breach’s focus on an employee email account suggests a targeted compromise of internal systems.