MisusePrivilege AbuseEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
CREDIT SUISSE AG
bd_43a4b495080aa7f6 · schema v1 · pii pii-v1
Full breach record for CREDIT SUISSE AG →Credit Suisse Group AG notified Vermont AG of an insider threat incident where a former employee with legitimate access copied personal data (employment, SSN, bank account) to a personal device. No evidence of misuse found. Credit Suisse offered 12 months of Experian identity monitoring.
Vermont clock✓ VT AG ≤14 bday≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a9aaa0dc81c48e30California State AGfiled 2023-02-14Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-14-credit-suisse-group-ag-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2023
- Raw hash
- de1d805ac0f7bea7339105f43bc7ddb05a58920663ef44a6384cc9c330ce0aec
Reporting entity
- Name
- CREDIT SUISSE AGnorm: credit suisse-ch
Victim entity
- Name
- CREDIT SUISSE AGnorm: credit suisse-ch
Incident
- Discovered
- Feb 14, 2023
- Materiality determined
- —
- Notification sent
- Feb 14, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- Internal
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.