UnknownHigh
KeyBank National Association
bd_204b30c931f55115 · schema v1 · pii pii-v1
Full breach record for KeyBank National Association →KeyBank reported a data breach to the Oregon Attorney General. The breach was reported on 2022-10-21. The breach occurred during 5/26/2022 - 7/12/2022. The breach was discovered on 9/23/2022. 510,553 individuals were affected. Notice was sent on 10/21/2022.
Oregon clock✓ OR AG ≤45d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_a4f654df6f257b9bCalifornia State AGfiled 2022-10-21Verified
- bd_6ac2e700788c603bOregon State AGfiled 2022-08-30(52d gap)Verified
- bd_770a2169c5d0839cWashington State AGfiled 2022-08-26(56d gap)Candidate
- bd_b28da354340c3c8cCalifornia State AGfiled 2022-08-26(56d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 56d gap
- bd_f081eecb38503eeeMontana State AGfiled 2022-08-26(56d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2022
- Raw hash
- 0a8c25162fda17742191962741bba2af7d5ad4371589fd0a9d7ac5616cb3f9cf
Reporting entity
- Name
- KeyBank National Associationnorm: keybank national
Victim entity
- Name
- KeyBank National Associationnorm: keybank national
Incident
- Discovered
- Sep 23, 2022
- Materiality determined
- —
- Notification sent
- Oct 21, 2022
- Affected individuals
- 510,553
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- OR AG ≤45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.