CREDIT SUISSE AG

Credit Suisse Group AG notified Vermont AG of an insider threat incident where a former employee with legitimate access copied personal data (employment, SSN, bank account) to a personal device. No evidence of misuse found. Credit Suisse offered 12 months of Experian identity monitoring.

Credit Suisse Group AG notified the California Attorney General of an incident where a former employee with legitimate access inappropriately copied personal data onto a personal device. Affected data includes basic employment info, social security IDs, salary history, and bank account details. The firm contained the incident, is pursuing legal remedies, and offered identity monitoring via Experian. No evidence of data misuse was found.

Credit Suisse Group AG reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-13. 1,667 Massachusetts residents were affected. The report records the breach type as electronic.

Credit Suisse Group AG reported a data breach to the Indiana Attorney General. 129 Indiana residents were affected.

A former IT employee of Credit Suisse AG exfiltrated data containing personal and financial information for 9 individuals. The breach occurred on an unknown date, estimated to be around January 1, 2016, and was discovered on December 21, 2022. The company is offering 24 months of credit monitoring services from Experian to affected individuals.