Varo Bank, National Association
bd_8777007060b756ca · schema v1 · pii pii-v1
All records for Varo Bank, National Association →Account takeover notice
Varo Bank, National Association notified customers of unauthorized access to their accounts. The filing says: “Varo believes that your credentials were used by an unauthorized third party…”
Varo Bank, N.A. notified customers that an unauthorized third party used valid credentials to access a subset of customer accounts between March 12 and March 18, 2024. The incident did not involve Varo's internal network. Affected data included name, address, email, phone, bank account number, and last 4 digits of SSN. Varo blocked the activity, investigated, and offered 12 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 12, 2024
Begins
Mar 12, 2024
Discovered
May 7, 2024
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Vermont State AGbd_036b60ed2a159b942024-05-07Verified
- Montana State AGbd_11e27d56c7b6753d2024-05-07Candidate
- Massachusetts State AGbd_5cef6e733a81b4da2024-05-07Verified
- Maine State AGbd_70cc782e61e6813b2024-05-07Verified
Filing propagation · 5 filings · 5 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.