AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
TD Bank, National Association
bd_3df62609b7d1f1ac · schema v1 · pii pii-v1
Full breach record for TD Bank, National Association →TD Bank notified Vermont residents that on July 1, 2024, an email containing personal and loan application data was inadvertently sent to a limited number of individuals. Affected data included names, loan numbers, DOBs, and contact info. TD Bank fixed the issue, offered 2 years of credit monitoring, and closed the investigation.
Vermont clock✓ VT AG ≤14 bday9 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-10-td-bank-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2024
- Raw hash
- 9c59f83f28b2352ed979270ec7fd1cd92a7b9c33421e46a4eca57f29853e2607
Reporting entity
- Name
- TD Bank, National Associationnorm: td bank national
Victim entity
- Name
- TD Bank, National Associationnorm: td bank national
Incident
- Discovered
- Jul 1, 2024
- Materiality determined
- Jul 10, 2024
- Notification sent
- Jul 10, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1535 Unused/Unsupported Cloud Storage
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.