MisuseFinancial ServicesFinanceData MishandlingEmployee Data InvolvedEmploymentGovernment IDFinancial accountIdentity (basic)MediumContained

CREDIT SUISSE AG

bd_a9aaa0dc81c48e30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 14, 2023

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for CREDIT SUISSE AG →2 incidents on file

Credit Suisse Group AG notified the California Attorney General of an incident where a former employee with legitimate access inappropriately copied personal data onto a personal device. Affected data includes basic employment info, social security IDs, salary history, and bank account details. The firm contained the incident, is pursuing legal remedies, and offered identity monitoring via Experian. No evidence of data misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 14, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_43a4b495080aa7f62023-02-14Verified
Massachusetts State AGbd_a6b90ea51f5989cd2023-02-13 · +1dVerified
Indiana State AGbd_a9c268cc344bb4902023-02-13 · +1dVerified

Name: CREDIT SUISSE AG
norm: credit suisse-ch

Name: CREDIT SUISSE AG
norm: credit suisse-ch
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Feb 3, 2023
Affected individuals: Not disclosed
Data types: EmploymentGovernment IDFinancial accountIdentity (basic)
Data elements: Date of birth
Attack vector: Insider
Threat actor: Internal
Initial access: insider_action

During the incident: Immediately took actions to contain and protect your data
Engaged Experian to provide identity monitoring services
Opened a helpline for questions relating to this matter
Pursuing legal remedies in response to this situation
Changes made: Continually enhance data loss measures, policies, procedures and training
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGFeb 13 · first

Indiana State AGFeb 13 · first

Vermont State AG+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-563142
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 14, 2023
Raw hash: 51c20fd9ffa9f7c696c8ca99e77679a81eea6cd304040530935b6063f771872d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCREDIT SUISSE AG

Victim entityCREDIT SUISSE AG

IncidentInsider

Stated responseImmediately took actions to contain and protect your data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov