AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

BMO Bank N.A.

bd_2b6871049af961ad · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 24, 2017

To disclose

—

Affected

18state residents only

Linked

5 filings

Confidence

67%

Full breach record for BMO Bank N.A. →4 incidents on file

BMO Harris Bank N.A. notified Montana customers of a misdelivery error during the production of 2016 IRS Form 5498. Some customers received another customer's form, exposing names, addresses, last four SSN digits, and IRA account details. The bank mailed corrected forms by May 31, 2017, and offered 12 months of credit monitoring via Identity Guard.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 24, 2017

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_102399c950a4b9812017-05-31 · +7dVerified
Oregon State AGbd_5a4bffd812ee17542017-05-31 · +7dVerified
California State AGbd_86c1b9b8c7c017be2017-05-31 · +7dVerified
Washington State AGbd_d7675678ff52dc612017-05-31 · +7dVerified

Name: BMO Harris Bank N.A.
norm: bmo harris bank

Name: BMO Bank N.A.
norm: bmo bank na
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: May 15, 2017
Affected individuals: 18state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown

During the incident: Arranged for twelve (12) months of free credit monitoring and identity theft protection through the Identity Guard program
Mailing corrected Form 5498 to affected customers no later than May 31, 2017
Making every effort to ensure misdirected forms are destroyed or returned
Changes made: Ensuring policies and procedures are in place to protect access to accounts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMay 24 · first · this page

Massachusetts State AG+7d

Oregon State AG+7d

California State AG+7d

Washington State AG+7d

Pattern: first filing May 24 (MT), last May 31 (WA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/BMO-Harris.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2017
Raw hash: ebe8427e3a52017f458a07fe06442252a8a7b3ea2497a289488027e680811f05

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBMO Harris Bank N.A.

Victim entityBMO Bank N.A.

IncidentUnknown

Stated responseArranged for twelve (12) months of free credit monitoring and identity theft protection through the Identity Guard program

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov