DisclosureLens
MisuseFinancial ServicesFinancePrivilege AbuseData ExfiltratedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsLowContained

CREDIT SUISSE AG

bd_122a4425477ce8be · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 21, 2022

Filed

Jan 20, 2023

To disclose

4 weeks

Affected

9state residents only

Confidence

66%
Full breach record for CREDIT SUISSE AG →2 incidents on file

A former IT employee of Credit Suisse AG exfiltrated data containing personal and financial information for 9 individuals. The breach occurred on an unknown date, estimated to be around January 1, 2016, and was discovered on December 21, 2022. The company is offering 24 months of credit monitoring services from Experian to affected individuals.

Maine clockDiscovered Dec 21, 2022 → Filed with AG Jan 20, 202330d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2546 days
discovery → filing · 4 weeks / 30 days

Jan 1, 2016

Begins

Dec 21, 2022

Discovered

Jan 20, 2023

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.