DisclosureLens
MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

TD Bank, National Association

bd_4561f646452d14e1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2024

Filed

Aug 14, 2024

To disclose

29 days

Affected · nationwide

412 in this filing

Confidence

66%
Full breach record for TD Bank, National Association →92 incidents on file

TD Bank N.A. reported an insider wrongdoing incident where an employee improperly accessed customer personal information between September 2023 and March 2024. The breach affected 41 individuals total, including 2 Maine residents. Compromised data included names, addresses, SSNs, DOBs, and debit card details. TD Bank reimbursed affected accounts, engaged law enforcement, and provided 24 months of identity protection services.

Maine clockDiscovered Jul 16, 2024 → Filed with AG Aug 14, 202429d ✓ ME AG ≤30d29 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 309 days
discovery → filing · 29 days

Sep 11, 2023

Begins

Jul 16, 2024

Discovered

Aug 14, 2024

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed41 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.