HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
TD Bank, National Association
bd_ad3e1c7aa348762a · schema v1 · pii pii-v1
Full breach record for TD Bank, National Association →TD Bank, N.A. reported an external system breach (hacking) occurring on February 1, 2023, discovered on April 14, 2023. The incident affected 15,549 individuals, including 560 Maine residents. Acquired data included names and Social Security Numbers. The bank provided 24 months of complimentary fraud protection services to affected individuals.
Maine clockDiscovered Apr 14, 2023 → Filed with AG May 12, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4edf9116b77b2bebMontana State AGfiled 2023-05-12Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c172eaa5-8cb1-43b8-9661-9199c7dd60bf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- b423eb2e4f61cace9abe61c71a4a8cd4f62de8dd828d2f45f1f9598f2a2d29cc
Reporting entity
- Name
- TD Bank, National Associationnorm: td bank national
- Industry
- Financial Services
Victim entity
- Name
- TD Bank, National Associationnorm: td bank national
- Industry
- Financial Services
Incident
- Discovered
- Apr 14, 2023
- Materiality determined
- —
- Notification sent
- May 12, 2023
- Affected individuals
- 15,549
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 14, 2023→ Filed with AG: May 12, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.