MisuseFinancial ServicesFinanceData MishandlingCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Union Bank N.A.

bd_4f39e6c1530d2137 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2012

Filed

Apr 5, 2012

To disclose

7 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Union Bank N.A. →

Union Bank N.A. discovered on February 15, 2012, that a former contractor retained proprietary bank data containing customer names, account numbers, addresses, phone numbers, and email addresses after departing on January 31, 2012. The bank initiated an investigation and offered two years of credit monitoring to affected customers. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 15, 2012 → Notified Apr 6, 201251d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 15 days

discovery → filing · 7 weeks / 50 days

Jan 31, 2012

Begins

Feb 15, 2012

Discovered

Apr 5, 2012

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Union Bank N.A.
norm: union bank na

Name: Union Bank N.A.
norm: union bank na
Industry: Financial Servicesllm

Discovered: Feb 15, 2012
Breach occurred: Jan 31, 2012
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Insider
Threat actor: Internal
Initial access: insider_action

During the incident: Union Bank immediately began and is still undertaking a thorough investigation of this matter
Provided two-year subscription to ITAC Sentinel Plus credit monitoring and identity theft protection service
Changes made: Taken steps to mitigate the risk of reoccurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: CA 60-day OK · 51d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 15, 2012
→ Notified: Apr 6, 2012
51d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 15, 2012 → Notified: Apr 6, 2012	51d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-22924
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2012
Raw hash: 2ae4deb7912d3308f04d99dbd2a9d394b20490678de0c05c1cba09dbb49ad86f

Reporting entityUnion Bank N.A.

Victim entityUnion Bank N.A.

Incidentdiscovered Feb 15, 2012

Stated responseUnion Bank immediately began and is still undertaking a thorough investigation of this matter

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov