MisusePrivilege AbuseCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
Ally Bank
bd_464fa0630aa82e93 · schema v1 · pii pii-v1
Full breach record for Ally Bank →Ally Bank reported a data breach resulting from insider wrongdoing that occurred on May 25, 2023. The incident was discovered on July 25, 2023, and affected 328 individuals, with one resident in Maine. The compromised information included names combined with financial account or card numbers along with their access credentials. Ally Bank began notifying affected individuals in writing on August 22, 2023, and offered 24 months of complimentary credit monitoring services through Equifax.
Maine clockDiscovered Jul 25, 2023 → Filed with AG Aug 22, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed328 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/362fd437-f316-4810-ac70-477ee9055174.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 22, 2023
- Raw hash
- ff82b8bce52d8db61eb4fcc4c3bc3094ae2b83448829c9711fc3113c1833f52b
Reporting entity
- Name
- Ally Banknorm: ally bank
Victim entity
- Name
- Ally Banknorm: ally bank
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Aug 22, 2023
- Affected individuals
- 328
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 25, 2023→ Filed with AG: Aug 22, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.