Monticello Banking Company
Monticello Banking Company cyberattack
Summary
Monticello Banking Company disclosed a cyberattack June 29, 2025 and restricted electronic services. Banking access and telephone service recovered in stages, but the exact intrusion window, final reconciliation and data-impact scope remain unresolved.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted location
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Data unavailable
Authorized users could not access required data because of the incident, even when the data was not encrypted, deleted, or destroyed.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Phone service disruption
Telephone, voice-over-IP, call-center, or related voice communication services were unavailable or materially impaired.
-
Online portal unavailable
A public, customer, employee, student, patient, vendor, or partner portal was unavailable or materially impaired.
-
Transaction processing disruption
Business, financial, customer, administrative, or operational transactions could not be completed normally.
-
Manual workaround required
Staff or users had to rely on paper, telephone, in-person, offline, or other manual processes.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
Monticello Banking Company publicly acknowledged a cyberattack on June 29, 2025 and restricted customer access to electronic services. The original bank disclosure predates our June 30 report. The reviewed evidence confirms a disruptive cyber incident, while the original intrusion window and technical mechanism remain unknown.
Operational significance
The bank restricted ATMs, cash management and its online and mobile services. Telephone disruption also complicated customer contact, and temporary numbers were provided. These restrictions affected everyday access to banking rather than establishing a loss of customer funds.
Recovery occurred in stages. WKYT reported that ATMs and online/mobile services returned July 2, while one business customer’s deposit still was not displaying correctly July 4. That account supports an unresolved transaction-display problem for that customer, without proving that the deposit was lost or that every account had the same problem.
On July 8, the bank announced that regular telephone lines were operational and retired its temporary numbers. The announcement establishes a communications milestone, rather than a verified completion date for all reconciliation and customer issues.
Confidence and uncertainty
Confidence is high because the affected bank directly disclosed cyber involvement and service restrictions. Refunds were offered for certain resulting fees, but the reviewed evidence does not quantify total fees, losses or customers affected.
No reliable actor attribution, ransomware finding, extortion demand, encryption assessment or confirmed data-theft scope was located. The bank’s stated purpose of protecting customers does not itself establish whether information was accessed or copied.
Analytic gaps
Public evidence does not establish the exact intrusion date, cause, full scope of affected systems, final transaction reconciliation or complete restoration date. The original disclosure establishes public awareness, rather than the start of unauthorized access.
Operational disruption is presumed resolved based on the documented recovery milestones and elapsed time. No exact end date is assigned. The available milestones do not establish that every customer issue had been settled when individual services returned.
Organizations involved
Impacted location
Monticello, Kentucky
Monticello is the affected bank’s headquarters city. Electronic-service disruption reached its customers; the record does not identify every affected branch.
Sources
Our report identifies restrictions on ATM, cash-management, online/mobile and telephone services.
Bank directly acknowledges a cyberattack, restricted electronic services and the option to request refunds for resulting fees.
Local station reproduces the bank’s disclosure and electronic-service restrictions.
Reports electronic banking returning Wednesday while a customer’s deposit display remained unresolved Friday.
Bank announces that regular telephone lines are operational and temporary numbers fromJune30 no longer work.
See something that needs correction?
Signed-in members can report an error, update, or missing source.