MisusePrivilege AbuseCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowResolved
KeyBank National Association
bd_8a85957c78f038e6 · schema v1 · pii pii-v1
Full breach record for KeyBank National Association →KeyBank, a financial services company, reported a data breach affecting 3 Maine residents. The breach was attributed to insider wrongdoing and was discovered on May 12, 2023, the same day it occurred. The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their associated access codes. KeyBank notified the affected individuals on June 7, 2023, and offered two years of credit monitoring and identity theft protection services through Equifax.
Maine clockDiscovered May 12, 2023 → Filed with AG Jun 7, 202326d ✓ ME AG ≤30d26 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8b8a0ab2a1be22e7Vermont State AGfiled 2023-06-02(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9c057611-011c-45d9-9308-be0c7e0d9763.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- 9e87f17a0efd57e6dc63b38b24e5caa89d8f8fecd721bc58e79c4ee857a8ad54
Reporting entity
- Name
- KeyBank National Associationnorm: keybank national
Victim entity
- Name
- KeyBank National Associationnorm: keybank national
- Industry
- Financial Services
Incident
- Discovered
- May 12, 2023
- Materiality determined
- —
- Notification sent
- Jun 7, 2023
- Affected individuals
- 3
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 12, 2023→ Filed with AG: Jun 7, 202326d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.