AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

U.S. Bank

bd_645b6f8f929fca43 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 19, 2017

Filed

May 24, 2017

To disclose

5 weeks

Affected

1state residents only

Confidence

65%

U.S. Bank notified Montana residents that on April 19, 2017, personal information including names, addresses, phone numbers, and Social Security numbers was inadvertently emailed to a prospective mortgage customer. The bank implemented database controls and offered one year of Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Apr 19, 2017

Begins

Apr 19, 2017

Discovered

May 24, 2017

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: U.S. Bank
norm: us bank

Name: U.S. Bank
norm: us bank
Industry: Financial Servicesllm

Discovered: Apr 19, 2017
Breach occurred: Apr 19, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 17, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1566.002 Spearphishing Link

During the incident: Additional controls have been implemented to ensure the database is only used for internal purposes
Asked Kroll to provide identity monitoring services at no cost to you for one year
Changes made: Additional controls have been implemented to ensure the database is only used for internal purposes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/US-Bank.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2017
Raw hash: 7853200fe8024a79f58274f67560edc7bb3dde19f434309310157e4a34a16692

Reporting entityU.S. Bank

Victim entityU.S. Bank

Incidentdiscovered Apr 19, 2017

Stated responseAdditional controls have been implemented to ensure the database is only used for internal purposes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov