HackingSkimmerCustomer Data InvolvedFINANCIAL_ACCOUNTCREDENTIALSPIILowContained
Bank of the West
bd_8216e60f64515f8a · schema v1 · pii pii-v1
Full breach record for Bank of the West →Bank of the West notified California residents that an ATM skimming device was installed on a Campbell Branch ATM between December 3 and December 22, 2018. The device captured card numbers, PINs, names, and expiration dates. The bank discovered the incident on January 20, 2019, contacted law enforcement, removed the device, blocked compromised accounts, issued new cards, and offered one year of free credit monitoring and identity theft protection services.
California clockDiscovered Jan 20, 2019 → Notified Mar 29, 201968d ✗ CA 60-day late11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-146057
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 5, 2019
- Raw hash
- 6ab7ff7a4e4ae5a0f1b2d2ce45a0e826daf800e808cf8c5682ccef982e5b6ed5
Reporting entity
- Name
- Bank of the Westnorm: bank of the west
- Industry
- financial_services
Victim entity
- Name
- Bank of the Westnorm: bank of the west
- Industry
- financial_services
Incident
- Discovered
- Jan 20, 2019
- Materiality determined
- —
- Notification sent
- Mar 29, 2019
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTCREDENTIALSPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- ExternalFinancial
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- CA 60-day late · 68d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 20, 2019→ Notified: Mar 29, 201968d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.