PhysicalTheftCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Wells Fargo Bank, National Association
bd_23cb0c5792fb92b1 · schema v1 · pii pii-v1
Full breach record for Wells Fargo Bank, National Association →Wells Fargo Bank, N.A. reported that on January 9, 2026, checks and deposit slips containing customer personal information (name, address, bank account numbers, and potentially SSN/DOB) were stolen from a Philadelphia branch. The bank is offering two years of Experian IdentityWorks and monitoring services. No specific count of affected individuals was disclosed in this notice.
Massachusetts clock✗ MA AG >90d20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e2249c33d912ad22Massachusetts State AGfiled 2026-06-01Candidate
- bd_7519bb941e7eac66Massachusetts State AGfiled 2026-07-01(30d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-986-wells-fargo-bank-na/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- c2dae30611e6de3a0ff637c76725afd59d465b280d73659006dbe865b74ab58c
Reporting entity
- Name
- Wells Fargo Bank, National Associationnorm: wells fargo bank national
Victim entity
- Name
- Wells Fargo Bank, National Associationnorm: wells fargo bank national
Incident
- Discovered
- Jan 9, 2026
- Materiality determined
- —
- Notification sent
- Jan 13, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.