On September 8, 2023, Community Trust Bank, Inc. provided notice of a data security incident to the Attorney General of Maine after discovering that one of the company’s vendors experienced a data breach related to the vendor’s use of the file-transfer application MOVEit. In this notice, CTBI explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, CTBI began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Community Trust Bank, Inc., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Community Trust Bank vendor data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Community Trust Bank Customers?

The Community Trust Bank vendor data breach was only recently announced, and more information is expected in the near future. However, CTBI’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, recently, one of the service providers used by CTBI informed the bank of a security vulnerability in the MOVEit file-transfer application that the vendor used during the normal course of business. Evidently, this vulnerability was exploited by an unauthorized party, which gave them access to confidential information that was provided to CTBI and then which CTBI provided to its service provider. To be clear, the incident did not involve hackers gaining access to CTBI’s IT network.

Upon learning about the incident, CTBI’s vendor launched an investigation. On July 24, 2023, the vendor’s investigation confirmed that an unauthorized party was able to access the personal information of certain CTBI customers through the provider’s network between May 29, 2023 and May 30, 2023. CTBI’s vendor then notified CTBI on August 9, 2023.

After learning that sensitive consumer data was accessible to an unauthorized party, Community Trust Bank reviewed the compromised files to determine what information was leaked and which consumers were impacted.

On September 8, 2023, Community Trust Bank sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Community Trust Bank, Inc.

Founded in 1903, Community Trust Bank, Inc. is a financial institution based out of Pikeville, Kentucky. CTBI provides customers with the standard financial products offered at banks, including checking and savings, accounts, loans and mortgages, wealth management and investment services, and business banking services. CTBI operates over 70 branches in Tennessee, Kentucky and West Virginia. Community Trust Bank employs more than 963 people and generates approximately $222 million in annual revenue.