DisclosureLens
AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedGovernment IDMedium

KeyBank National Association

bd_defdcfe5d4de6f5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 10, 2023

Filed

Apr 13, 2023

To disclose

5 weeks

Affected

2state residents only

Confidence

75%
Full breach record for KeyBank National Association →13 incidents on file

KeyBank National Association reported an inadvertent disclosure of personal information affecting two Maine residents. The breach, which occurred on April 1, 2020, was discovered on March 10, 2023. The compromised data included names and Social Security numbers. KeyBank notified the affected individuals on March 31, 2023, and offered 24 months of identity theft protection and credit monitoring services through Equifax.

Maine clockDiscovered Mar 10, 2023 → Filed with AG Apr 13, 202334d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1073 days
discovery → filing · 5 weeks / 34 days

Apr 1, 2020

Begins

Mar 10, 2023

Discovered

Apr 13, 2023

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.