Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Bank of the West
bd_9e1227ef3c91cca2 · schema v1 · pii pii-v1
Full breach record for Bank of the West →Bank of the West notified customers in July 2014 that an email scam compromised two employees' remote login credentials in mid-May 2014. The attackers accessed emails containing customer names, account/loan numbers, and Social Security Numbers. The bank disabled remote access, investigated, and offered one year of free identity monitoring.
California clockDiscovered May 15, 2014 → Notified Jul 15, 201461d ✗ CA 60-day late9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-45891
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2014
- Raw hash
- fcd7eadddb7fee2e5029e684e617bba1bc14a025112aa2d4d1f9bde6a372612f
Reporting entity
- Name
- Bank of the Westnorm: bank of the west
Victim entity
- Name
- Bank of the Westnorm: bank of the west
Incident
- Discovered
- May 15, 2014
- Materiality determined
- Jul 15, 2014
- Notification sent
- Jul 15, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- CA 60-day late · 61d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 15, 2014→ Notified: Jul 15, 201461d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.