HackingStolen CredentialsCustomer Data InvolvedCREDENTIALSIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
MUFG Union Bank, National Association
bd_2a4c92a7314b5b1b · schema v1 · pii pii-v1
Full breach record for MUFG Union Bank, National Association →MUFG Union Bank, N.A. notified customers that an unauthorized third party used login credentials to access Union Bank Online and/or Mobile Banking accounts between November 9 and November 22, 2018. The compromised credentials were likely obtained from third-party sources, not Union Bank systems. Affected data included User IDs, passwords, names, partial or full bank account numbers, account balances, and transaction information. The bank blocked unauthorized access, reset passwords, and offered 12 months of complimentary credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_63fee85137cfc7c3Montana State AGfiled 2018-12-07(4d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-142509
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2018
- Raw hash
- 069ef45871939b3b5548358968faa07613ec2c6de0b34822a7370a2cb822ec1e
Reporting entity
- Name
- MUFG Union Bank, National Associationnorm: mufg union bank national
- Domain
- unionbank.com
Victim entity
- Name
- MUFG Union Bank, National Associationnorm: mufg union bank national
- Domain
- unionbank.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 7, 2018
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this issue to law enforcement authorities
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.