MisuseFinancial ServicesFinanceData MishandlingCustomer Data InvolvedIdentity (basic)Financial accountGovernment IDMediumContained

HSBC BANK USA, NATIONAL ASSOCIATION

bd_8379d1424a94be30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 31, 2012

Filed

Oct 30, 2012

To disclose

13 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for HSBC BANK USA, NATIONAL ASSOCIATION →13 incidents on file

HSBC Bank USA National Association notified customers that a resigned employee took account information in late July 2012. Affected data included names, phone numbers, account numbers, and potentially Social Security numbers. HSBC offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 13 weeks / 91 days

Jul 27, 2012

Begins

Jul 31, 2012

Discovered

Oct 30, 2012

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: HSBC BANK USA, NATIONAL ASSOCIATION
norm: hsbc bank usa national

Name: HSBC BANK USA, NATIONAL ASSOCIATION
norm: hsbc bank usa national
Industry: Financial Servicesllm

Discovered: Jul 31, 2012
Breach occurred: Jul 27, 2012 – Jul 31, 2012
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountGovernment ID
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal
Initial access: insider_action

During the incident: Offered free one year subscription to ITAC Sentinel credit monitoring and identity theft protection service
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-36836
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2012
Raw hash: eea9bbafd3f26376e584da026e539cd12f554ae55a8e05c892eb18e6fd118320

Reporting entityHSBC BANK USA, NATIONAL ASSOCIATION

Victim entityHSBC BANK USA, NATIONAL ASSOCIATION

Incidentdiscovered Jul 31, 2012

Stated responseOffered free one year subscription to ITAC Sentinel credit monitoring and identity theft protection service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov