HSBC BANK USA, NATIONAL ASSOCIATION

HSBC Bank USA mistakenly emailed documentation containing personal information, including Social Security numbers, telephone numbers, email addresses, and limited account identifiers, to an unintended recipient on August 18, 2026. The error was discovered on August 19, 2026. HSBC requested deletion of the email from the recipient's mailbox and obtained confirmation of deletion. Affected individuals are offered 24 months of credit monitoring and identity theft protection.

HSBC Bank USA, National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-10. 3 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA, National Association notified the New Hampshire Attorney General of a data breach affecting 1 resident. Unauthorized users accessed online accounts between April 6-10, 2019. Data exposed included names, addresses, account numbers, and transaction history. HSBC suspended access, enhanced authentication, and offered 1 year of credit monitoring.

HSBC Bank USA, National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-11-27. 14 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA, National Association notified the NH Attorney General of unauthorized access to online banking accounts between October 29 and November 2, 2018. Four New Hampshire residents were affected. The compromised data included names, addresses, account numbers, and transaction history. HSBC suspended access, enhanced authentication with one-time passcodes, and offered one year of credit monitoring.

HSBC Bank USA, National Association notified the NH Attorney General of unauthorized access to online banking accounts between October 4 and October 14, 2018. 21 New Hampshire residents were affected. Compromised data included names, addresses, account numbers, and transaction history. HSBC suspended affected accounts and enhanced authentication. Credit monitoring was offered.

HSBC Bank USA reported unauthorized access to online banking accounts between October 4 and October 14, 2018. Affected data included names, addresses, account numbers, balances, and transaction history. HSBC suspended access, reset credentials, enhanced authentication, and offered one year of identity monitoring.

HSBC Bank USA, National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-07-26. 1 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA, National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-07-26. 2 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-28. 1 Massachusetts residents were affected. The report records the breach type as paper.

HSBC Bank USA, National Association reported a data breach to the Oregon Attorney General. The breach was reported on 2016-01-14. The breach occurred during 12/7/2015 - 12/8/2015. The breach was discovered on 12/10/2015. 432,095 individuals were affected. Notice was sent on 1/11/2016.

HSBC Bank USA, N.A. notified South Carolina residents that its mortgage servicing provider inadvertently sent encrypted disks containing personal and financial data to an unauthorized third-party analytics firm between Dec 7-8, 2015. The third party returned the disks. HSBC offered one year of complimentary credit monitoring.

HSBC Bank USA, N.A. notified Montana residents that its mortgage servicing provider inadvertently sent encrypted disks containing personal and financial data to an unauthorized third-party analytics firm between Dec 7-8, 2015. HSBC offered one year of credit monitoring.

HSBC Bank USA, National Association notified Washington AG of a data breach where a third-party mortgage servicing provider inadvertently sent encrypted disks containing customer PII (names, SSNs, mortgage/deposit account numbers) to an unauthorized analytics firm between Dec 7-8, 2015. 5,270 WA residents affected. HSBC notified customers on Jan 11, 2016, and offered 1-year Identity Guard monitoring.

HSBC Bank USA notified customers that its mortgage servicing provider inadvertently sent encrypted disks containing personal information (names, SSNs, account numbers) to an unauthorized third-party analytics firm between Dec 7-8, 2015. The third party returned the disks without accessing the data. HSBC offered one year of identity monitoring.

HSBC Bank USA National Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-12-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA National Association notified the NH Attorney General of a data breach where mortgage customer data was inadvertently sent to an unaffiliated third-party document custodian on June 19, 2015. The incident affected 5 New Hampshire residents, exposing names, account numbers, addresses, and loan details. HSBC discovered the error on June 22, 2015, and notified the AG on July 24, 2015. Affected customers were offered one year of credit monitoring.

HSBC Bank USA, National Association disclosed that account details, including name, account number, property address, loan and payment details, were sent in error to a commercial entity not associated with HSBC. The third party did not view the data and deleted it. HSBC offered one year of credit monitoring and identity theft protection to affected individuals.

HSBC Bank USA, N.A. notified the New Hampshire Attorney General on November 29, 2013, of a breach involving two NH residents. An authorized employee accessed customer accounts to misuse information, suspecting fraudulent activity. Data exposed included names, SSNs, driver's licenses, and account numbers. The employee was terminated, and the NY Special Frauds Unit was notified. Credit monitoring was offered.

HSBC Bank USA, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-05-22. 2 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA, NA reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-05-09. 2 Massachusetts residents were affected. The report records the breach type as paper.

HSBC Bank USA, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-02-01. 89 Massachusetts residents were affected. The report records the breach type as electronic.

HSBC Bank USA, N.A. notified the New Hampshire Attorney General of a breach involving 11 NH residents. An employee accessed customer data between August and December 2012 to supply fraudsters with PII for fraudulent withdrawals. HSBC terminated the employee, reported to NY Special Frauds Unit, and offered credit monitoring.

HSBC Bank USA National Association notified customers that a resigned employee took account information in late July 2012. Affected data included names, phone numbers, account numbers, and potentially Social Security numbers. HSBC offered one year of credit monitoring.

HSBC Card and Retail Services and HSBC Bank Nevada, N.A. notified the New Hampshire Attorney General on April 25, 2008, of a security incident involving its website's 'Forgot Login Password' page. Unauthorized third parties exploited a scripting vulnerability to view account information using account numbers and the last four digits of Social Security numbers. The incident affected 19 New Hampshire residents. HSBC strengthened authentication, issued new account numbers, and provided one year of credit monitoring.