AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowContained

TD Bank, National Association

bd_bbacf8256379eabd · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2025

Filed

Apr 15, 2026

To disclose

32 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for TD Bank, National Association →89 incidents on file

TD Bank U.S. notified customers that around September 2025, levy letters were incorrectly bundled in an isolated mailing error. Affected information included name, address, and account number. The bank is investigating internally and offering two years of complimentary fraud monitoring via Fraud-Defender. No misuse of information has been reported.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d32 weeks discovery → filing

Incident timeline

discovery → filing · 32 weeks / 226 days

Sep 1, 2025

Begins

Sep 1, 2025

Discovered

Apr 15, 2026

Filed

vs. sector median

+24 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: TD Bank, National Association
norm: td bank national

Name: TD Bank, National Association
norm: td bank national
Industry: Financial Servicesllm

Discovered: Sep 1, 2025
Breach occurred: Sep 1, 2025 – Sep 30, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unknown

During the incident: Addressing internally through an investigation
Offering complimentary two-year membership to Fraud-Defender provided by Merchants Information Solutions
Offering to cover expenses associated with closing existing accounts and opening new accounts
Changes made: Taking steps to prevent this type of mailing error from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(226 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-578-td-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2026
Raw hash: 2a603485c503eff0280d75efed385269850b2da0f595f13caee1d0f0e97605e2

Reporting entityTD Bank, National Association

Victim entityTD Bank, National Association

Incidentdiscovered Sep 1, 2025

Stated responseAddressing internally through an investigation

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov