HackingFinancial ServicesProfessional ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedCredentialsIdentity (basic)MediumContained

American Bankers Association

bd_5af0dd6500dfec61 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 22, 2015

To disclose

—

Affected

6,400

Confidence

66%

Full breach record for American Bankers Association →

American Bankers Association (ABA) notified users that email addresses and passwords for its Shopping Cart were compromised. At least 6,400 records were posted online. The breach date is listed as September 16, 2015. ABA reset passwords and engaged forensic investigators. No evidence of credit card data access was found.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 16, 2015

Begins

Oct 22, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6,400 affectedView incident

Name: American Bankers Association
norm: american bankers
Domain: aba.com

Name: American Bankers Association
norm: american bankers
Domain: aba.com
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: —
Breach occurred: Sep 16, 2015
Materiality determined: —
Notification sent: Oct 1, 2015
Affected individuals: 6,400nationwide
Data types: CredentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Resetting Shopping Cart passwords
Working with a cybersecurity forensics company to identify the origin and full extent of this breach
Working with cyber information-sharing groups such as FS-ISAC to identify threats, spot breaches and respond quickly
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-58430
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 22, 2015
Raw hash: 9ff9e8a5e5aee2efc8fe5fd37f24e0f00eaa56e9c15028fb14b0809fea6f0b26

Reporting entityAmerican Bankers Association

Victim entityAmerican Bankers Association

IncidentUnauthorized Access

Stated responseResetting Shopping Cart passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov