KeyBank National Association
bd_b28da354340c3c8c · schema v1 · pii pii-v1
Full breach record for KeyBank National Association →13 incidents on fileKeyBank notified customers of a data breach involving its vendor, Overby-Seawell Company (OSC). An unauthorized external party gained remote access to OSC's network on July 5, 2022, and acquired personal information of KeyBank mortgage clients. KeyBank was contacted by OSC on August 4, 2022. Affected data included names, addresses, phone numbers, mortgage account numbers, property information, home insurance details, and the first eight digits of Social Security numbers. OSC engaged third-party cybersecurity experts, deployed enhanced security monitoring, and notified the FBI. KeyBank offered two years of complimentary Equifax Complete Premier identity protection to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 5, 2022
Begins
Aug 4, 2022
Discovered
Aug 26, 2022
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_2076dbcba57a74a12022-08-26Verified
- Washington State AGbd_770a2169c5d0839c2022-08-26Candidate
- Montana State AGbd_f081eecb38503eee2022-08-26Verified
- Oregon State AGbd_6ac2e700788c603b2022-08-30 · +4dVerified
Show 2 more filings ↓Show fewer ↑up to 56d gap
- Oregon State AGbd_204b30c931f551152022-10-21 · +56dVerified
- California State AGbd_a4f654df6f257b9b2022-10-21 · +56dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Aug 26 (MA), last Oct 21 (CA) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.