PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedPIIIdentity (basic)Government IDFinancial accountMediumContained

U.S. Bank National Association

bd_359b08840a4dbf12 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 6, 2020

To disclose

—

Affected

Not disclosed

Linked

15 filings

Confidence

72%

Full breach record for U.S. Bank National Association →31 incidents on file

On July 30, 2020, a computer server was physically stolen from a U.S. Bank corporate office. The server contained customer PII including names, account numbers, Social Security numbers, and credit card information. U.S. Bank worked with authorities to recover the server and offered affected customers free 2-year credit monitoring through TransUnion's myTrueIdentity service.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 30, 2020

Begins

Nov 6, 2020

Filed

This filing is one of 15 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_9b96c2653dd4d85c2020-10-28 · +9dCandidate
California State AGbd_66a8642b145c21522020-10-21 · +16dCandidate
California State AGbd_acdaf1a744033ff92020-11-23 · +17dVerified
California State AGbd_62ad177f04ee8a092020-10-14 · +23dVerified

Show 6 more filings ↓up to 89d gap

Maine State AGbd_810d46cea34ce9722020-10-14 · +23dCandidate
California State AGbd_79886892df92a2182020-12-09 · +33dVerified by operator
Maine State AGbd_89417be5e4a0d3302020-12-09 · +33dVerified by operator
California State AGbd_83e5a3ac54bd73f32020-12-22 · +46dVerified by operator
California State AGbd_6eaa424a28ec93db2021-02-03 · +89dVerified by operator
Maine State AGbd_7ccfebd29269e7082021-02-03 · +89dVerified by operator

Showing first 10 of 14 linked disclosures.

Name: U.S. Bank National Association
norm: us bank national
Industry: Banking / Financial Services

Name: U.S. Bank National Association
norm: us bank national
Industry: Banking / Financial Services
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 30, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Working with authorities to recover the stolen server
Offered customers the option to receive a new account number by calling the Fraud Liaison Center at [REDACTED-PHONE]
Arranged for two years of free online credit monitoring service (myTrueIdentity) through TransUnion Interactive for affected individuals
Changes made: Arranged for free credit monitoring and identity restoration services through TransUnion Interactive (myTrueIdentity) for two years at no cost to affected individuals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 2 states

View merged incident ↗

California State AGOct 14 · first

Maine State AGOct 14 · first

California State AG+7d

California State AG+14d

California State AG+23d · this page

California State AG+40d

California State AG+56d

Maine State AG+56d

California State AG+69d

California State AG+112d

Maine State AG+112d

Pattern: first filing Oct 14 (CA), last Feb 3 (ME) — a 112-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-195910
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2020
Raw hash: ed3b9b2c2639828d28b9641072c083a577f84ae3291771447f0e2873613af8ec

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityU.S. Bank National Association

Victim entityU.S. Bank National Association

IncidentUnknown

Stated responseWorking with authorities to recover the stolen server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov