MisusePrivilege AbuseEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Wells Fargo Bank, National Association
bd_8a7292e4861f953a · schema v1 · pii pii-v1
Full breach record for Wells Fargo Bank, National Association →Wells Fargo Bank, N.A. notified Vermont consumers of a data breach involving a former employee who accessed and used customer information for fraudulent purposes between May 2022 and March 2023. Affected data included names, SSNs, driver's license numbers, and financial account details. Wells Fargo reported the incident to law enforcement and offered two years of Experian IdentityWorks services.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-19-wells-fargo-bank-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2024
- Raw hash
- 0bb6cec8fcebab0a80654ba359584db2e7b069d0020a4b4c359f5ab5978e71ce
Reporting entity
- Name
- Wells Fargo Bank, National Associationnorm: wells fargo bank national
Victim entity
- Name
- Wells Fargo Bank, National Associationnorm: wells fargo bank national
Incident
- Discovered
- Jul 1, 2024
- Materiality determined
- —
- Notification sent
- Aug 1, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- InternalFinancial
- Regulator citations
- Reported the matter to law enforcement
- Initial access
- insider_action
Compliance
- Time to disclose
- 11 weeks(80 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.