2022-03-08 LAKE SHORE BANCORP, INC. Cybersecurity Incident

Page last updated on April 11, 2024

LAKE SHORE BANCORP, INC. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2022-03-08 14:35:47 EST.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date:
Disclosure Date: 2022-03-08
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2022-03-08

LAKE SHORE BANCORP, INC. filed an 8-K at 2022-03-08 14:35:47 EST
Accession Number: 0001341318-22-000013

Item 7.01 Regulation FD Disclosure.

In November 2021, Lake Shore Savings Bank (the “Bank”), the banking subsidiary of Lake Shore Bancorp, Inc. (the “Company”), experienced a data security incident that prevented employees from accessing internal systems and data for a limited period of time. Upon discovering this incident, the Bank immediately launched an investigation and engaged a digital forensics firm to help determine the scope of the incident and identify potentially impacted data. The Bank also promptly notified law enforcement and the Bank’s primary regulator, the Office of the Comptroller of the Currency, about the incident. Through its investigation, the Bank identified unauthorized access to certain data in its internal systems. However, the Bank believes that its core banking and electronic interfaces, including deposit and loan systems, online/mobile banking systems or ATM systems, were not affected by this event. While there is no evidence that customer personal information was misused, the Bank notified affected customers of the incident. All impacted individuals were offered identify theft protection services. The Bank has implemented additional safeguards to help ensure the security of its network to reduce the risk of a similar event occurring in the future.


The information contained in this Current Report on Form 8-K provided under this Item 7.01 is being furnished and shall not be deemed to be “filed” for purposes of Section 18 of the Securities Exchange Act of 1934 (the “Exchange Act”), or otherwise subject to the liability of such section, nor shall it be deemed incorporated by reference in any filing of the Company under the Securities Act of 1933 or the Exchange Act, unless expressly incorporated by specific reference in such filing.

Company Information