KeyBank National Association
bd_f081eecb38503eee · schema v1 · pii pii-v1
Full breach record for KeyBank National Association →13 incidents on fileKeyBank notified Montana residents of a third-party vendor security incident involving Overby-Seawell Company (OSC). On July 5, 2022, an unauthorized external party gained remote access to OSC's network and acquired KeyBank mortgage client data, including names, addresses, mortgage account numbers, phone numbers, and the first eight digits of SSNs. KeyBank was contacted by OSC on August 4, 2022. OSC engaged third-party cybersecurity experts and notified the FBI. Affected individuals were offered two years of Equifax credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 5, 2022
Begins
Aug 4, 2022
Discovered
Aug 26, 2022
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_2076dbcba57a74a12022-08-26Verified
- Washington State AGbd_770a2169c5d0839c2022-08-26Candidate
- California State AGbd_b28da354340c3c8c2022-08-26Verified
- Oregon State AGbd_6ac2e700788c603b2022-08-30 · +4dVerified
Show 2 more filings ↓Show fewer ↑up to 56d gap
- Oregon State AGbd_204b30c931f551152022-10-21 · +56dVerified
- California State AGbd_a4f654df6f257b9b2022-10-21 · +56dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Aug 26 (MA), last Oct 21 (CA) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.