BANK OF AMERICA CORPORATION
ent_019dea4e89b272f3ee5c58402fb83dd1
Disclosures
25+
State AG · 3 jurisdictions
Multi-filing incidents
6
incidents joining 2+ filings here
Max affected reported
2,676
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- BANK OF AMERICA CORPORATION
- Normalized
- bank of america— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 9DJT3UXIJIZJI4WXO774
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- bankofamerica.com
Disclosure history (newest 25)newest first
- Massachusetts State AGas victim2026-09-01
Bank of America notified Massachusetts residents of a data breach occurring on September 9, 2026, where customer documents containing names, addresses, and Social Security numbers were mailed to an incorrect address and could not be recovered. The bank is monitoring accounts, offering two years of Experian IdentityWorks protection, and advising customers to review statements and credit reports.
- Massachusetts State AGas victim2026-09-01
Bank of America notified Massachusetts residents of a data breach occurring on September 3, 2026, involving the loss of documents in transit. Affected data included names, addresses, dates of birth, Social Security numbers, and financial account information from new account opening forms. The bank implemented heightened security on brokerage accounts, offered two years of Experian IdentityWorks protection, and advised customers on fraud prevention measures including RPIN setup and credit freezes.
- Massachusetts State AGas victim2026-08-05
Bank of America notified customers that mortgage loan documents containing PII (name, SSN, driver's license, financial account details) were damaged in transit on July 1, 2026. The documents were returned to the bank. The incident is classified as a physical loss/mishandling event. Bank of America is offering two years of identity theft protection via Experian IdentityWorks and monitoring accounts for suspicious activity.
- Massachusetts State AGas victim2026-08-05
Bank of America, N.A. notified Massachusetts residents of a data breach occurring on July 14, 2026. An employee email error resulted in the disclosure of deceased customers' investment account information, including names, Social Security numbers, and account numbers. The company conducted internal investigations, deleted the erroneous email, and is monitoring accounts for suspicious activity. No specific count of affected individuals was disclosed in the filing.
- Massachusetts State AGas victim2026-08-01
Bank of America, N.A. notified Massachusetts residents that mortgage loan documentation containing PII (names, SSNs, DOBs) and financial data (account numbers, balances) was lost in transit on July 20, 2026. The documents were not recovered. The bank is monitoring accounts and offering two years of identity theft protection via Experian.
- Massachusetts State AGas victim2026-07-30
Bank of America, N.A. notified Massachusetts residents of a data breach occurring on June 30, 2026, where customer bond package documents were lost in transit. The incident potentially exposed names, addresses, Social Security numbers, and account numbers. The bank is monitoring accounts and offering two years of identity theft protection via Experian.
- Massachusetts State AGas victim2026-06-15
Bank of America notified Massachusetts residents of an isolated mailing error on May 8, 2026, resulting in the disclosure of client relationship agreement documents. Affected data included names, addresses, dates of birth, Social Security numbers, and account numbers. The recipient returned the documents to the bank. Bank of America is monitoring accounts, has heightened security measures, and is offering two years of complimentary identity theft protection via Experian IdentityWorks.
- Massachusetts State AGas victim2026-05-01
Bank of America notified Massachusetts residents that documents containing personal and financial information were damaged in transit on April 7, 2026. The incident involved trust tax returns, names, addresses, Social Security numbers, and account numbers. The documents were recovered. The bank is monitoring accounts and offering two years of identity theft protection via Experian.
- Massachusetts State AGas victim2026-03-04
Bank of America notified Massachusetts residents of an isolated mailing error on February 5, 2026, that resulted in the disclosure of Medallion Signature documentation containing names, addresses, Social Security numbers, and external account numbers. The document was returned and destroyed. The bank is monitoring accounts and offering two years of identity theft protection via Experian.
- Massachusetts State AGas victim2025-10-29
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-29. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-10-22
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-22. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-08-27
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-27. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-07-01
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-01. 2 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-06-13
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-13. 2 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-06-02
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-02. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-04-02
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-04-02. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-03-12
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-12. 2 Massachusetts residents were affected.
- Maine State AGas victim2025-03-03
Bank of America reported an inadvertent disclosure of customer information to one Maine resident on February 18, 2025, discovered on February 19, 2025. The incident involved an employee email error exposing names, addresses, SSNs, and financial account numbers. Notification was sent on February 28, 2025, including two years of Experian credit monitoring.
- Massachusetts State AGas victim2025-02-21
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-21. 2 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-01-03
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-01-03. 1 Massachusetts residents were affected.
- Nebraska State AGas victim2025-01-03
Bank of America, a financial services/insurance entity filed a data breach notification with the Nebraska Attorney General. The breach was discovered on 2024-10-24 according to the AG's register. The breach is dated 2024-10-01. Nebraska residents were notified on 2025-01-03.
- Maine State AGas victim2025-01-03
Bank of America notified the Maine Attorney General of a data breach affecting 414 individuals, including 1 Maine resident. The breach occurred on October 1, 2024, when an unauthorized party accessed a third-party provider's systems. Affected data included names, addresses, passport numbers, SSNs, and loan numbers. Bank of America stopped the activity, is monitoring accounts, and offered 24 months of credit monitoring through Experian.
- Massachusetts State AGas victim2024-07-02
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-02. 1 Massachusetts residents were affected.
- Maine State AGas victim2024-06-12
Bank of America reported an inadvertent disclosure of customer names and Social Security numbers due to an employee email error on April 16, 2024. The incident was discovered on April 22, 2024. 2,676 individuals were affected, including 18 Maine residents. Notifications were sent on June 12, 2024, offering 24 months of Experian credit monitoring.
- Massachusetts State AGas victim2024-06-05
Bank of America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-05. 1 Massachusetts residents were affected.
Subsidiary disclosures (5)filed by group companies
◈ These filings were made by or about subsidiaries of BANK OF AMERICA CORPORATION — not by BANK OF AMERICA CORPORATION itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- Massachusetts State AGvia NMS CAPITAL, L.P.2025-07-25
NMS Capital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-25. 5 Massachusetts residents were affected.
- New Hampshire State AGvia Bank of America, National Association2024-02-02
Infosys McCamish Systems LLC (IMS), a third-party vendor for Bank of America, experienced a cybersecurity event on or around Nov 3, 2023. IMS disclosed to Bank of America on Nov 24, 2023 that deferred compensation plan data may have been compromised. 160 NH residents' financial account info and PII were potentially exposed. IMS engaged forensic investigators and contained the threat. Bank of America is notifying affected individuals and offering credit monitoring.
- Indiana State AGvia Bank of America, National Association2024-02-01
Bank of America, N.A reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-29 and was reported on 2024-02-01. 479 Indiana residents were affected. 57,028 individuals affected in total.
- Massachusetts State AGvia Bank of America, National Association2016-11-25
Bank of America N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-11-25. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGvia COUNTRYWIDE HOME LOANS, INC.2008-09-11
Countrywide Home Loans reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-09-11. 48,371 Massachusetts residents were affected. The report records the breach type as electronic.