KeyBank National Association
ent_019e240c697b0f7b38bce1203f5e15de
Disclosures
23
State AG · 8 jurisdictions
Multi-filing incidents
4
incidents joining 2+ filings here
Max affected reported
510,553
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- KeyBank National Association
- Normalized
- keybank national— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- HUX2X73FUCYHUVH1BK78
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- KEYCORP— per GLEIF relationship records
Disclosure history (23)newest first
- Massachusetts State AGas victim2025-02-11
KeyBank N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-11. 27 Massachusetts residents were affected.
- Maine State AGas victim2025-02-11
KeyBank N.A. reported a third-party vendor breach involving Wong Fleming. An unauthorized external party gained remote access to Wong Fleming's network on Dec 14, 2024, potentially accessing KeyBank client data including SSNs and account numbers. 1,227 individuals affected; 13 in Maine. KeyBank notified the FBI and offered 24 months of credit monitoring.
- Massachusetts State AGas victim2024-03-27
KeyBank N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-27. 2 Massachusetts residents were affected.
- Massachusetts State AGas victim2023-12-21
KeyBank N.A reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-21. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2023-06-07
KeyBank, a financial services company, reported a data breach affecting 3 Maine residents. The breach was attributed to insider wrongdoing and was discovered on May 12, 2023, the same day it occurred. The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their associated access codes. KeyBank notified the affected individuals on June 7, 2023, and offered two years of credit monitoring and identity theft protection services through Equifax.
- Massachusetts State AGas victim2023-06-07
KeyBank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-07. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Vermont State AGas victim2023-06-02
KeyBank notified Vermont consumers of a security incident occurring on or about May 12, 2023, where unauthorized actors used personal information to create online banking profiles. Affected data included names, SSNs, financial account numbers, and transaction history. KeyBank engaged law enforcement and forensic experts, and offered two years of Equifax credit monitoring.
- Maine State AGas victim2023-04-13
KeyBank National Association reported an inadvertent disclosure of personal information affecting two Maine residents. The breach, which occurred on April 1, 2020, was discovered on March 10, 2023. The compromised data included names and Social Security numbers. KeyBank notified the affected individuals on March 31, 2023, and offered 24 months of identity theft protection and credit monitoring services through Equifax.
- Oregon State AGas victim2022-10-21
KeyBank reported a data breach to the Oregon Attorney General. The breach was reported on 2022-10-21. The breach occurred during 5/26/2022 - 7/12/2022. The breach was discovered on 9/23/2022. 510,553 individuals were affected. Notice was sent on 10/21/2022.
- California State AGas victim2022-10-21
KeyBank notified customers of a data breach involving a third-party vendor, Overby-Seawell Company (OSC). An unauthorized external party gained remote access to OSC's network on July 5, 2022, acquiring personal information of KeyBank mortgage clients, including names, property addresses, account numbers, and insurance details. KeyBank was notified on August 4, 2022. The incident did not affect KeyBank's systems directly. KeyBank offered two years of complimentary credit monitoring via Equifax.
- Oregon State AGas victim2022-08-30
KeyBank reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-30. The breach occurred during 5/26/2022 - 7/12/2022. The breach was discovered on 8/4/2022. 494,130 individuals were affected. Notice was sent on 8/26/2022.
- Massachusetts State AGas victim2022-08-26
KeyBank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-08-26. 4,682 Massachusetts residents were affected. The report records the breach type as electronic.
- Washington State AGas victim2022-08-26
KeyBank issued a supplemental notice to the Washington Attorney General regarding a security incident at vendor Overby-Seawell Company (OSC). An unauthorized external party gained remote access to OSC's network between July 5 and July 12, 2022, acquiring KeyBank client mortgage data. KeyBank was notified on August 4, 2022. The incident affected 54,295 Washington residents, exposing names, addresses, mortgage account numbers, and insurance info. KeyBank notified affected individuals on October 21, 2022, and offered 24 months of credit monitoring.
- California State AGas victim2022-08-26
KeyBank notified customers of a data breach involving its vendor, Overby-Seawell Company (OSC). An unauthorized external party gained remote access to OSC's network on July 5, 2022, and acquired personal information of KeyBank mortgage clients. KeyBank was contacted by OSC on August 4, 2022. Affected data included names, addresses, phone numbers, mortgage account numbers, property information, home insurance details, and the first eight digits of Social Security numbers. OSC engaged third-party cybersecurity experts, deployed enhanced security monitoring, and notified the FBI. KeyBank offered two years of complimentary Equifax Complete Premier identity protection to affected individuals.
- Montana State AGas victim2022-08-26
KeyBank notified Montana residents of a third-party vendor security incident involving Overby-Seawell Company (OSC). On July 5, 2022, an unauthorized external party gained remote access to OSC's network and acquired KeyBank mortgage client data, including names, addresses, mortgage account numbers, phone numbers, and the first eight digits of SSNs. KeyBank was contacted by OSC on August 4, 2022. OSC engaged third-party cybersecurity experts and notified the FBI. Affected individuals were offered two years of Equifax credit monitoring.
- Massachusetts State AGas victim2021-11-22
KeyBank National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-11-22. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2021-02-05
KeyBank N.A. reported a data breach affecting 2 Maine residents, discovered on January 21, 2021. The incident, which occurred between December 5, 2020, and January 15, 2021, involved the unauthorized acquisition of financial account or card numbers along with their access codes. The company notified affected individuals on February 5, 2021, and offered identity theft protection services.
- Indiana State AGas victim2021-02-05
KeyBank NA reported a data breach to the Indiana Attorney General. The breach occurred on 2020-12-05 and was reported on 2021-02-05. 36 Indiana residents were affected. 278 individuals affected in total.
- Massachusetts State AGas victim2020-03-06
KeyBank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-03-06. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2019-08-07
KeyBank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-07. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2018-02-02
KeyBank N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-02-02. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2017-12-15
KeyBank N.A, reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-12-15. 3 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2014-11-03
KeyBank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-11-03. 1 Massachusetts residents were affected. The report records the breach type as paper.
Supply-chain cascadesreviewed and confirmed
- KeyBank National Association’s filing is one of at least 3 in the Overby-Seawell Company supply-chain incident (2022).