HackingFinancial ServicesFinanceCapture App DataSupply Chain (3P Vendor)Customer Data InvolvedPCIFinancial accountLowActive

East West Bank

bd_7357ec90d7d0685f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 2, 2014

To disclose

—

Affected

Not disclosed

Confidence

73%

Full breach record for East West Bank →3 incidents on file

East West Bank notified California customers in October 2014 that their debit cards may have been compromised due to unauthorized access to payment card data at AB Acquisition LLC (Albertsons, Acme, Jewel-Osco, Shaw's, Star Markets) stores between June 22 and July 17, 2014. East West Bank monitored affected accounts and encouraged customers to obtain free identity protection services via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 22, 2014

Begins

Oct 2, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: East West Bank
norm: east west bank

Name: East West Bank
norm: east west bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jun 22, 2014 – Jul 17, 2014
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1056 Input Capture
Threat actor: ExternalFinancial
Third party: via AB Acquisition LLC

During the incident: Additional steps have been taken to closely monitor transactions on affected customer accounts
Recommending customers closely monitor their account(s) online and statements for suspicious activity
Offering customers the option to have a new card reissued by contacting customer service
Directing customers to register for free identity protection services through AllClear ID offered by AB Acquisition LLC
Changes made: Closely monitoring transactions on customer accounts
Directing customers to contact credit-reporting agencies (Equifax, Experian, TransUnion) to obtain free credit reports
Advising customers to consider placing a security freeze on their credit files
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46835
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 2, 2014
Raw hash: f79ed8218ea7b52ef65b65e13d251c32fa36c6517961616b3012571b20de5960

Reporting entityEast West Bank

Victim entityEast West Bank

IncidentUnauthorized Access

Stated responseAdditional steps have been taken to closely monitor transactions on affected customer accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov