AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

BMO Bank N.A.

bd_d7675678ff52dc61 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 31, 2017

To disclose

—

Affected

47state residents only

Linked

5 filings

Confidence

68%

Full breach record for BMO Bank N.A. →4 incidents on file

BMO Harris Bank N.A. notified the Washington AG of a misdelivery error involving 47 Washington residents. During the production and mailing of 2016 IRS Form 5498 for IRA accounts, some customers received another customer's form containing PII (name, address, last 4 digits of SSN, account number, IRA contributions, and FMV). Notices were sent to affected individuals on May 25, 2017, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 31, 2017

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_102399c950a4b9812017-05-31Verified
Oregon State AGbd_5a4bffd812ee17542017-05-31Verified
California State AGbd_86c1b9b8c7c017be2017-05-31Verified
Montana State AGbd_2b6871049af961ad2017-05-24 · +7dCandidate

Name: BMO Bank N.A.
norm: bmo bank na

Name: BMO Bank N.A.
norm: bmo bank na
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: May 25, 2017
Affected individuals: 47state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown

During the incident: Sent letters to impacted customers
Offered one free year of identity theft protection and credit monitoring
Making every effort to ensure forms received in error are destroyed or returned to the Bank
Mailing missing forms to customers
Changes made: Reviewing current processes for opportunities to implement enhancements with strengthened preventative and detective controls
Planning to strengthen oversight protocols over vendor's tax form printing and mailing processes
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMay 24 · first

Massachusetts State AG+7d

Oregon State AG+7d

California State AG+7d

Washington State AG+7d · this page

Pattern: first filing May 24 (MT), last May 31 (WA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9709.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2017
Raw hash: 07384a87d8d980cc319245b861ba1c4459c5a74386bb699b9a19d970a7db0496

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBMO Bank N.A.

Victim entityBMO Bank N.A.

IncidentUnknown

Stated responseSent letters to impacted customers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com