AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumResolved
NORTHERN TRUST CORP
bd_4f0629a67536f2f2 · schema v1 · pii pii-v1
Full breach record for NORTHERN TRUST CORP →Northern Trust inadvertently transmitted an encrypted file containing employee benefits plan participant information (name, address, SSN, account numbers, bank routing/account numbers) to a record-keeping company not responsible for that specific plan. The incident occurred on May 17, 2014. The recipient company's employee viewed the data, notified Northern Trust, and permanently deleted the file. No further dissemination occurred. Northern Trust offered one year of credit monitoring.
California clockDiscovered May 31, 2014 → Notified Jul 1, 201431d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d595cae220df156eHawaii State AGfiled 2014-07-29Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-46054
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 29, 2014
- Raw hash
- df199f7a0cb69a4e7ffa15276d8eaf998c03f9e7af929adeaab784393abe62ad
Reporting entity
- Name
- NORTHERN TRUST CORPnorm: northern trust
- Domain
- northerntrust.com
Victim entity
- Name
- NORTHERN TRUST CORPnorm: northern trust
- Domain
- northerntrust.com
Incident
- Discovered
- May 31, 2014
- Materiality determined
- —
- Notification sent
- Jul 1, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unknown
- Regulator citations
- Filed notification with California Attorney General
- Third party
- via Record-keeping company
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 31d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 31, 2014→ Notified: Jul 1, 201431d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.