HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountAuthenticationMediumContained

USAA Federal Savings Bank

bd_cc3470b585b24bdf · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 21, 2023

To disclose

—

Affected

546state residents only

Linked

2 filings

Confidence

70%

Full breach record for USAA Federal Savings Bank →11 incidents on file

USAA notified Washington AG of a data incident involving a third-party service provider. Between Dec 20, 2022 and May 18, 2023, unauthorized individuals accessed USAA member credentials shared by call center reps. Affected data included names, addresses, DOB, driver's license numbers, last 4 digits of SSN, bank/card numbers, and PINs. USAA blocked access, offered 2-year Experian IdentityWorks membership, and enhanced security controls. No fraud identified.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 20, 2022

Begins

Jun 21, 2023

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_f27f736cf8e7739c2023-06-21Verified

Name: USAA Federal Savings Bank
norm: usaa federal savings bank

Name: USAA Federal Savings Bank
norm: usaa federal savings bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Dec 20, 2022 – May 18, 2023
Materiality determined: —
Notification sent: Jun 22, 2023
Affected individuals: 546state-resident count only
Data types: Identity (basic)Government IDFinancial accountAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Notified USAA by third-party service provider
Blocked the unauthorized access
Monitoring your account(s) for any suspicious activity
Working with the service provider to enhance its security measures and control environment
Offering a complimentary two-year membership of Experian’s IdentityWorks program
Changes made: Enhance security measures and control environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJun 21 · first

Washington State AGJun 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA24555.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 21, 2023
Raw hash: 387c4e1650b34d12ddd106271eef0d1158cb22d55e6bd9269e96c4a196f21961

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityUSAA Federal Savings Bank

Victim entityUSAA Federal Savings Bank

IncidentUnauthorized Access

Stated responseNotified USAA by third-party service provider

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com