norm: first dataUSLEI H9AD9QN07EKOX2GRN450 · no CIKMax severity: Critical↳ subsidiary of FISERV, INC.

Canonical registry

First Data Corporation

ent_019ed3e26e112185f2492a17e3f8a559

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

108,500

nationwide · State AG CA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: First Data Corporation
Normalized: first data— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: H9AD9QN07EKOX2GRN450
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record
Corporate parent: FISERV, INC.— per SEC Exhibit 21 filing

Disclosure history (1)newest first

🐻California State AGas victim2012-05-11
First Data Corporation notified the California AG on May 7, 2012, regarding an administrative oversight where limited personal information (names, addresses, SSNs) of approximately 108,500 merchants was shared with three third-party firms (including a First Data subsidiary and a fraud analytics company) for testing credit and risk scoring products. The incident occurred between January and February 2012. The data was sent from application databases, not live transaction data, and no PCI data was impacted. The third parties deleted the data upon request, and First Data sent written notifications to the affected merchants.