MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

TD Bank, National Association

bd_c65dd19d8dc15b0a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 13, 2025

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for TD Bank, National Association →92 incidents on file

TD Bank, N.A. notified the Maryland Attorney General that an employee improperly accessed the personal information of one Maryland resident between November 2023 and August 2024. The data involved included name, address, phone number, date of birth, SSN, account number, debit card number, and transactional data. The bank notified the customer and offered two years of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2023

Begins

Nov 13, 2025

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_5e29f27551f3ea032025-12-24 · +41dCandidate

Name: TD Bank, National Association
norm: td bank national

Name: TD Bank, National Association
norm: td bank national
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Nov 1, 2023 – Aug 31, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Provided notice to the Center Consumer Protection Division of the Maryland Attorney General’s Office
Initial access: insider_action

During the incident: Notified affected customers both by telephone and in writing
Offered two years of free credit monitoring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maryland State AGNov 13 · first · this page

Vermont State AG+41d

Pattern: first filing Nov 13 (MD), last Dec 24 (VT) — a 41-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376216.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 07832d8f9a003e6ecb7d44abe65eac8bb5c2373abfd7ba85ffa7683757612465

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTD Bank, National Association

Victim entityTD Bank, National Association

IncidentInsider

Stated responseNotified affected customers both by telephone and in writing

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov