On August 14, 2025, Norway Savings Bank (“NSB”) learned of a security incident at a third-party data services provider. An external actor gained unauthorized access to portions of the provider’s data environment. NSB’s internal systems were not involved. Upon discovery, NSB worked closely with the vendor and engaged cybersecurity experts to investigate. The review concluded on October 27, 2025.
Norway Savings Bank is a mutual banking and financial services company headquartered in Norway, Maine, founded in 1866. It operates as a community bank with 25 branch locations across Maine and New Hampshire.
While there is no evidence that NSB customer data has been misused, the investigation determined that certain personal information may have been exposed.
NSB sent data breach notification letters to those affected and offered complimentary credit monitoring services. If you received a Data Breach notification letter from NSB, it confirms that your information was potentially impacted.
What information is involved in the Norway Savings Bank Data Breach?
Compromised information may include:
Name
Address
Date of Birth
Social Security Number
Tax Identification Number
Financial Account Information
Norway Savings Asset Management Group accounts were not affected.
Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly. NSB is offering complimentary identity protection services through IDX, including credit monitoring, CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.
Residents of California benefit from additional privacy protections under the California Consumer Privacy Act (CCPA.
If you received a NOTICE OF DATA BREACH letter from Norway Savings Bank, your personal and financial information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.