ALLY
bd_2e9c50542e45ddd8 · schema v1 · pii pii-v1
Full breach record for ALLY →4 incidents on fileAlly notified Montana residents of a data breach on August 30, 2024, involving unauthorized access to a third-party vendor's systems on August 1, 2024. The incident exposed names, SSNs, DOBs, addresses, driver's license numbers, emails, and phone numbers. Ally terminated the vendor relationship, engaged forensic investigators, and provided 3 years of credit monitoring via Sontiq/TransUnion.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 1, 2024
Discovered
Aug 30, 2024
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Illinois State AGbd_1859df5ae4d071822024-08-01 · +29dVerified
Filing propagation · 2 filings · 2 states
View merged incident ↗Pattern: first filing Aug 1 (IL), last Aug 30 (MT) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.