PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

U.S. Bank National Association

bd_8dd85247d0750d28 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 30, 2020

Filed

Sep 18, 2020

To disclose

7 weeks

Affected

1,292state residents only

Linked

18 filings

Confidence

71%

Full breach record for U.S. Bank National Association →34 incidents on file

U.S. Bank, N.A. reported the physical theft of a computer server from its Ontario, CA office on July 30, 2020. The server contained customer and employee PII, including names, SSNs, account numbers, and driver's licenses. 1,292 Washington residents were notified. The bank provided two years of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 50 days

Jul 30, 2020

Begins

Jul 30, 2020

Discovered

Sep 18, 2020

Filed

vs. sector median

1 wks faster

This filing is one of 18 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_62ad177f04ee8a092020-10-14 · +26dVerified by operator
California State AGbd_66a8642b145c21522020-10-21 · +33dVerified by operator
California State AGbd_9b96c2653dd4d85c2020-10-28 · +40dVerified by operator
California State AGbd_359b08840a4dbf122020-11-06 · +49dVerified by operator

Show 6 more filings ↓up to 138d gap

California State AGbd_acdaf1a744033ff92020-11-23 · +66dVerified by operator
California State AGbd_79886892df92a2182020-12-09 · +82dVerified by operator
Maine State AGbd_89417be5e4a0d3302020-12-09 · +82dVerified by operator
California State AGbd_83e5a3ac54bd73f32020-12-22 · +95dVerified by operator
California State AGbd_6eaa424a28ec93db2021-02-03 · +138dVerified by operator
Maine State AGbd_7ccfebd29269e7082021-02-03 · +138dVerified by operator

Showing first 10 of 17 linked disclosures.

Name: U.S. Bank National Association
norm: us bank national
Domain: usbank.com

Name: U.S. Bank National Association
norm: us bank national
Domain: usbank.com
Industry: Financial Servicesllm

Discovered: Jul 30, 2020
Breach occurred: Jul 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 18, 2020
Affected individuals: 1,292state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Working with authorities to recover the stolen server
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for two years provided by TransUnion Interactive
Offered free credit monitoring and identity restoration services
Offered free fraud alert information
Offered free credit report information
Offered free credit-security freeze information
Changes made: Working with authorities to recover the stolen server
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 3 states

View merged incident ↗

Washington State AGSep 18 · first · this page

California State AG+26d

California State AG+33d

California State AG+40d

California State AG+49d

California State AG+66d

California State AG+82d

Maine State AG+82d

California State AG+95d

California State AG+138d

Maine State AG+138d

Pattern: first filing Sep 18 (WA), last Feb 3 (ME) — a 138-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 17 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10319.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2020
Raw hash: 5b7315640358cd5a841f462b1b9ffc8c061687d4f54b4c88e1101cd077519911

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityU.S. Bank National Association

Victim entityU.S. Bank National Association

Incidentdiscovered Jul 30, 2020

Stated responseWorking with authorities to recover the stolen server

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com