KeyBank National Association
bd_a4f654df6f257b9b · schema v1 · pii pii-v1
Full breach record for KeyBank National Association →13 incidents on fileKeyBank notified customers of a data breach involving a third-party vendor, Overby-Seawell Company (OSC). An unauthorized external party gained remote access to OSC's network on July 5, 2022, acquiring personal information of KeyBank mortgage clients, including names, property addresses, account numbers, and insurance details. KeyBank was notified on August 4, 2022. The incident did not affect KeyBank's systems directly. KeyBank offered two years of complimentary credit monitoring via Equifax.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 5, 2022
Begins
Aug 4, 2022
Discovered
Oct 21, 2022
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Oregon State AGbd_204b30c931f551152022-10-21Verified
- Oregon State AGbd_6ac2e700788c603b2022-08-30 · +52dVerified
- Massachusetts State AGbd_2076dbcba57a74a12022-08-26 · +56dVerified
- Washington State AGbd_770a2169c5d0839c2022-08-26 · +56dCandidate
Show 2 more filings ↓Show fewer ↑up to 56d gap
- California State AGbd_b28da354340c3c8c2022-08-26 · +56dVerified
- Montana State AGbd_f081eecb38503eee2022-08-26 · +56dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Aug 26 (MA), last Oct 21 (CA) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.