HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Western Alliance Bank
bd_ca35ca5f0299f314 · schema v1 · pii pii-v1
Full breach record for Western Alliance Bank →Western Alliance Bank filed a supplemental notice with the New Hampshire Attorney General regarding a data security incident involving a third-party secure file transfer software. Unauthorized access occurred between October 12-24, 2024. The bank discovered the incident on January 27, 2025. A comprehensive review determined that personal information (including SSN, tax ID, driver's license, and financial account data) of 39 additional New Hampshire residents was compromised. Notifications were mailed on June 30, 2025, offering credit monitoring services.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_1e2bedd75bd91a03Washington State AGfiled 2025-06-30Verified
- bd_aa0c3c3710d65700Oregon State AGfiled 2025-06-30Verified
- bd_f8043b0f67779b8fTexas State AGfiled 2025-07-01(1d gap)Verified
- bd_06380a907e1b2dceCalifornia State AGfiled 2025-03-14(108d gap)Candidate
Show 4 more filings ↓Show fewer ↑up to 108d gap
- bd_1ff1a0aa9cf88a3eMaryland State AGfiled 2025-03-14(108d gap)Verified
- bd_31bf2692dfc20e2eMontana State AGfiled 2025-03-14(108d gap)Verified
- bd_72b6c4555f835088Maine State AGfiled 2025-03-14(108d gap)Verified
- bd_c53d68dc954452b4New Hampshire State AGfiled 2025-03-14(108d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/western-alliance-bank-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 7e290fc10fe97e025bed0326fa9b7865bf3b591e0ad90fc698cbb9b4fd3b7e35
Reporting entity
- Name
- Western Alliance Banknorm: western alliance bank
Victim entity
- Name
- Western Alliance Banknorm: western alliance bank
Incident
- Discovered
- Jan 27, 2025
- Materiality determined
- Jun 3, 2025
- Notification sent
- Jun 30, 2025
- Affected individuals
- 39
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement of this incident
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.