PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

U.S. Bank National Association

bd_7ccfebd29269e708 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 21, 2020

Filed

Feb 3, 2021

To disclose

24 weeks

Affected · nationwide

4901 in this filing

Linked

18 filings

Confidence

50%

Full breach record for U.S. Bank National Association →34 incidents on file

A network server belonging to U.S. Bank, N.A. was stolen, which resulted in the exposure of personal information. The breach occurred on July 30, 2020, and was discovered on August 21, 2020. One resident of Maine was affected. The compromised data included names and Social Security numbers. U.S. Bank offered 24 months of identity theft protection services to those affected.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 21, 2020 → Filed with AG Feb 3, 2021166d ⏱ ME AG >30d24 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 22 days

discovery → filing · 24 weeks / 166 days

Jul 30, 2020

Begins

Aug 21, 2020

Discovered

Feb 3, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 18 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_6eaa424a28ec93db2021-02-03Verified by operator
California State AGbd_83e5a3ac54bd73f32020-12-22 · +43dVerified by operator
California State AGbd_79886892df92a2182020-12-09 · +56dVerified by operator
Maine State AGbd_89417be5e4a0d3302020-12-09 · +56dVerified by operator

Show 6 more filings ↓up to 112d gap

California State AGbd_acdaf1a744033ff92020-11-23 · +72dVerified by operator
California State AGbd_359b08840a4dbf122020-11-06 · +89dVerified by operator
California State AGbd_9b96c2653dd4d85c2020-10-28 · +98dVerified by operator
California State AGbd_66a8642b145c21522020-10-21 · +105dVerified by operator
California State AGbd_62ad177f04ee8a092020-10-14 · +112dVerified by operator
Maine State AGbd_810d46cea34ce9722020-10-14 · +112dVerified by operator

Showing first 10 of 17 linked disclosures.

Name: U.S. Bank National Association
norm: us bank national

Name: U.S. Bank National Association
norm: us bank national
Industry: Financial Servicesllm

Discovered: Aug 21, 2020
Breach occurred: Jul 30, 2020
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 3, 2021
Affected individuals: 490state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

Changes made: Offered 24 months of identity theft protection services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(166 days from discovery to filing)
Compliance flags: ME AG >30d · 166dME resident >60d · 166d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 21, 2020
→ Filed with AG: Feb 3, 2021
166d 30 days (soft) ME AG >30d
Maine
Discovered: Aug 21, 2020
→ Notified: Feb 3, 2021
166d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 21, 2020 → Filed with AG: Feb 3, 2021	166d	30 days (soft)	ME AG >30d
Maine	Discovered: Aug 21, 2020 → Notified: Feb 3, 2021	166d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 2 states

View merged incident ↗

California State AGOct 14 · first

Maine State AGOct 14 · first

California State AG+7d

California State AG+14d

California State AG+23d

California State AG+40d

California State AG+56d

Maine State AG+56d

California State AG+69d

California State AG+112d

Maine State AG+112d · this page

Pattern: first filing Oct 14 (CA), last Feb 3 (ME) — a 112-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 17 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/47469dc2-4d6f-4bc8-a34a-78fee7026fd6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2021
Raw hash: 4d5d14d88d02ebed9f81a82ab56da2d1283975f0ad7c2b100736d6fddb9196c1

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityU.S. Bank National Association

Victim entityU.S. Bank National Association

Incidentdiscovered Aug 21, 2020

Stated responseOffered 24 months of identity theft protection services.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov