PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedPIIIdentity (basic)LowContained

U.S. Bank National Association

bd_9db7e3923c07e7a1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 8, 2020

To disclose

—

Affected

3state residents only

Linked

18 filings

Confidence

66%

Full breach record for U.S. Bank National Association →34 incidents on file

U.S. Bank National Association notified Montana residents that a computer server containing personal information on commercial loans was physically stolen from its corporate office in Ontario, CA on July 30, 2020. The bank offered two years of free credit monitoring and identity restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 30, 2020

Begins

Sep 8, 2020

Filed

This filing is one of 18 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_62ad177f04ee8a092020-10-14 · +36dVerified by operator
California State AGbd_66a8642b145c21522020-10-21 · +43dVerified by operator
California State AGbd_9b96c2653dd4d85c2020-10-28 · +50dVerified by operator
California State AGbd_359b08840a4dbf122020-11-06 · +59dVerified by operator

Show 6 more filings ↓up to 148d gap

California State AGbd_acdaf1a744033ff92020-11-23 · +76dVerified by operator
California State AGbd_79886892df92a2182020-12-09 · +92dVerified by operator
Maine State AGbd_89417be5e4a0d3302020-12-09 · +92dVerified by operator
California State AGbd_83e5a3ac54bd73f32020-12-22 · +105dVerified by operator
California State AGbd_6eaa424a28ec93db2021-02-03 · +148dVerified by operator
Maine State AGbd_7ccfebd29269e7082021-02-03 · +148dVerified by operator

Showing first 10 of 17 linked disclosures.

Name: U.S. Bank National Association
norm: us bank national

Name: U.S. Bank National Association
norm: us bank national
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 30, 2020
Materiality determined: —
Notification sent: Sep 3, 2020
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Working with authorities to recover the stolen server
Arranged for free credit monitoring and identity restoration services for two years provided by TransUnion Interactive
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 3 states

View merged incident ↗

Montana State AGSep 8 · first · this page

California State AG+36d

California State AG+43d

California State AG+50d

California State AG+59d

California State AG+76d

California State AG+92d

Maine State AG+92d

California State AG+105d

California State AG+148d

Maine State AG+148d

Pattern: first filing Sep 8 (MT), last Feb 3 (ME) — a 148-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 17 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/US-Bank-Consumer.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2020
Raw hash: c06aac93ebc16aef02d0df5f81a4c2e1b6ed4ef509c55f137f6abf021fbf6a9a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityU.S. Bank National Association

Victim entityU.S. Bank National Association

IncidentUnknown

Stated responseWorking with authorities to recover the stolen server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov