HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Western Alliance Bank

bd_ca35ca5f0299f314 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 27, 2025

Filed

Jun 30, 2025

To disclose

22 weeks

Affected

39state residents only

Linked

12 records

Confidence

65%

Full breach record for Western Alliance Bank →

Western Alliance Bank filed a supplemental notice with the New Hampshire Attorney General regarding a data security incident involving a third-party secure file transfer software. Unauthorized access occurred between October 12-24, 2024. The bank discovered the incident on January 27, 2025. A comprehensive review determined that personal information (including SSN, tax ID, driver's license, and financial account data) of 39 additional New Hampshire residents was compromised. Notifications were mailed on June 30, 2025, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d22 weeks discovery → filing

Incident timeline

undetected · 107 days

discovery → filing · 22 weeks / 154 days

Oct 12, 2024

Begins

Jan 27, 2025

Discovered

Jun 3, 2025

Scope determined

Jun 30, 2025

Filed

vs. sector median

+14 wks slower

This filing is one of 12 records about the same incident.View merged incident

A leak claim by cl0p about this victim was first seen 157 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_1e2bedd75bd91a032025-06-30Verified
Oregon State AGbd_aa0c3c3710d657002025-06-30Verified
Texas State AGbd_f8043b0f67779b8f2025-07-01 · +1dVerified
California State AGbd_06380a907e1b2dce2025-03-14 · +108dCandidate

Show 6 more filings ↓up to 108d gap

Nebraska State AGbd_1664f06702ed95452025-03-14 · +108dVerified
Maryland State AGbd_1ff1a0aa9cf88a3e2025-03-14 · +108dVerified
Montana State AGbd_31bf2692dfc20e2e2025-03-14 · +108dVerified
Massachusetts State AGbd_50441007ebdd801d2025-03-14 · +108dVerified
Maine State AGbd_72b6c4555f8350882025-03-14 · +108dVerified
New Hampshire State AGbd_c53d68dc954452b42025-03-14 · +108dVerified

Showing first 10 of 11 linked disclosures.

Name: Western Alliance Bank
norm: western alliance bank
Domain: westernalliancebank.com

Name: Western Alliance Bank
norm: western alliance bank
Domain: westernalliancebank.com
Industry: Financial Servicesllm

Discovered: Jan 27, 2025
Breach occurred: Oct 12, 2024 – Oct 24, 2024
Undetected for: 107 daysoccurrence → discovery
Materiality determined: Jun 3, 2025
Notification sent: Jun 30, 2025
Affected individuals: 39state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement of this incident
Initial access: exploit_public_facing

During the incident: Engaged a forensic security firm, through counsel, to assist with WAB’s investigation of the incident
Notified law enforcement of this incident
Offering complimentary credit monitoring services to individuals whose Social Security number, tax identification number, and/or driver’s license number/state identification number were involved
Providing information on how to protect against fraudulent activity and identity theft
Changes made: Enhancing its technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(154 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

California State AGMar 14 · first

Nebraska State AGMar 14 · first

Maryland State AGMar 14 · first

Montana State AGMar 14 · first

Massachusetts State AGMar 14 · first

Maine State AGMar 14 · first

New Hampshire State AGMar 14 · first

Washington State AG+108d

Oregon State AG+108d

New Hampshire State AG+108d · this page

Texas State AG+109d

Pattern: first filing Mar 14 (CA), last Jul 1 (TX) — a 109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/western-alliance-bank-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2025
Raw hash: 7e290fc10fe97e025bed0326fa9b7865bf3b591e0ad90fc698cbb9b4fd3b7e35

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWestern Alliance Bank

Victim entityWestern Alliance Bank

Incidentdiscovered Jan 27, 2025

Stated responseEngaged a forensic security firm, through counsel, to assist with WAB’s investigation of the incident

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov