ALLY FINANCIAL INC.

Ally Bank notified Massachusetts and New York residents of a data breach discovered on April 13, 2026. An unauthorized non-Ally employee was inappropriately provided access to customer deposit accounts. Exposed data included names, addresses, SSNs, DOBs, bank account numbers, and transaction details. Ally revoked the employee's access, offered new account numbers, implemented fraud monitoring, and engaged Sontiq (TransUnion) to provide three years of identity theft services.

Ally Bank reported a data breach resulting from insider wrongdoing that occurred on May 25, 2023. The incident was discovered on July 25, 2023, and affected 328 individuals, with one resident in Maine. The compromised information included names combined with financial account or card numbers along with their access credentials. Ally Bank began notifying affected individuals in writing on August 22, 2023, and offered 24 months of complimentary credit monitoring services through Equifax.

Ally Bank notified California residents that a third-party supplier inadvertently transmitted files containing personal information (including SSNs, credit scores, and employment data) to another financial institution in November 2018. The error was discovered in November 2018. The receiving institution deleted the files. Ally Bank offered two years of complimentary credit monitoring through Equifax.