DisclosureLens
AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

BANK OF AMERICA CORPORATION

bd_b92421b33724d659 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 19, 2025

Filed

Mar 3, 2025

To disclose

12 days

Affected

1state residents only

Confidence

66%
Full breach record for BANK OF AMERICA CORPORATION →130 incidents on file

Bank of America reported an inadvertent disclosure of customer information to one Maine resident on February 18, 2025, discovered on February 19, 2025. The incident involved an employee email error exposing names, addresses, SSNs, and financial account numbers. Notification was sent on February 28, 2025, including two years of Experian credit monitoring.

Maine clockDiscovered Feb 19, 2025 → Filed with AG Mar 3, 202512d ✓ ME AG ≤30d12 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · 12 days

Feb 18, 2025

Begins

Feb 19, 2025

Discovered

Mar 3, 2025

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.