MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
TD Bank, National Association
bd_62572ed962ae3e4f · schema v1 · pii pii-v1
Full breach record for TD Bank, National Association →TD Bank notified Vermont residents of a data breach involving a former employee who improperly accessed personal information between August 9 and December 11, 2024. Affected data included names, SSNs, and financial account numbers. Two Vermont residents were notified. TD Bank reimbursed accounts, engaged law enforcement, and offered two years of credit monitoring.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9bd25fbf5135a754Vermont State AGfiled 2025-04-09(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-10-td-bank-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2025
- Raw hash
- f4818257cd75956d36d730d04b7920fe0960c8026d475f9922a6089f1435d1d2
Reporting entity
- Name
- TD Bank, National Associationnorm: td bank national
Victim entity
- Name
- TD Bank, National Associationnorm: td bank national
Incident
- Discovered
- Dec 11, 2024
- Materiality determined
- Apr 10, 2025
- Notification sent
- Apr 10, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.