MisuseFinancial ServicesFinancePrivilege AbuseCustomer Data InvolvedEmployee Data InvolvedFinancial accountIdentity (basic)PCILowContained

Ally Bank

bd_1b5146e14aaba5b5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 12, 2025

Filed

Jan 23, 2026

To disclose

6 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Ally Bank →18 incidents on file

Ally Bank notified Massachusetts residents that a former employee inappropriately accessed deposit accounts on December 12, 2025. The incident involved unauthorized access to financial account information. Ally implemented supplemental fraud monitoring, engaged law enforcement, and offered three years of identity theft protection services through Sontiq.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 42 days

Dec 12, 2025

Discovered

Jan 23, 2026

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Ally Bank
norm: ally bank
Domain: ally.com

Name: Ally Bank
norm: ally bank
Domain: ally.com
Industry: Financial Servicesllm

Discovered: Dec 12, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Financial accountIdentity (basic)PCI
Attack vector: Insider
Threat actor: Internal
Initial access: insider_action

During the incident: Implemented supplemental fraud monitoring and controls to detect and prevent unauthorized activity on your Ally account
Working with law enforcement on this matter
Engaged Sontiq, a TransUnion Company at our expense, to provide you with world class ID Theft services
Changes made: Implemented supplemental fraud monitoring and controls to detect and prevent unauthorized activity on your Ally account
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-108-ally-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 23, 2026
Raw hash: c810690c54ab859d20fc25e5a014d8ae66c6110cc0139bdf79515df34f0ae0db

Reporting entityAlly Bank

Victim entityAlly Bank

Incidentdiscovered Dec 12, 2025

Stated responseImplemented supplemental fraud monitoring and controls to detect and prevent unauthorized activity on your Ally account

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov