AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedPIIIdentity (basic)LowResolved

TD Bank, National Association

bd_c9948f100ef3878d · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Sep 1, 2026

To disclose

—

Affected

54state residents only

Confidence

68%

Full breach record for TD Bank, National Association →92 incidents on file

TD Bank notified 54 Massachusetts residents of a data security event involving unauthorized disclosure of personal identifying information. The incident was resolved by updating the system with the correct mailing address, indicating a misdelivery or data handling error rather than external hacking. TD Bank offered two years of complimentary fraud monitoring and assistance with account closure/reopening.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 1, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed54 affectedView incident

Name: TD Bank, National Association
norm: td bank national

Name: TD Bank, National Association
norm: td bank national
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 54state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown

During the incident: Addressed the incident by updating our system with the correct mailing address
Offering complimentary two-year membership to Fraud-Defender provided by Merchants Information Solutions
Offering to cover all expenses associated with closing existing accounts and opening new accounts for customers who want added protection
Changes made: Updating system with the correct mailing address
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1549-td-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 4d48bd7404503adfb34efe386779a2f231e47d7cc0db1f23a611bf5a2161a1d1

Reporting entityTD Bank, National Association

Victim entityTD Bank, National Association

IncidentUnknown

Stated responseAddressed the incident by updating our system with the correct mailing address

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov