Bank of the West
ent_6bdb8de85bb7fef2c30571a9
Disclosures
18
State AG · 4 jurisdictions
Multi-filing incidents
5
incidents joining 2+ filings here
Max affected reported
18
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Bank of the West
- Normalized
- bank of the west— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (18)newest first
- California State AGas victim2022-06-23
Bank of the West notified customers that ATM skimming devices installed on several ATMs compromised debit card numbers, PINs, and possibly names and addresses. The bank identified unauthorized withdrawal attempts on November 10, 2021, and contained the incident by taking ATMs offline and issuing new cards. Affected individuals were offered one year of credit monitoring.
- Montana State AGas victim2021-04-12
Bank of the West notified customers in April 2021 that hackers used stolen usernames and passwords to access online banking accounts. Unauthorized individuals viewed personal information including names, addresses, account numbers, phone numbers, and emails. The bank stopped the activity and offered one year of credit monitoring.
- Massachusetts State AGas victim2019-08-05
Bank of the West reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-05. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2019-07-23
Bank of the West reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-23. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2019-04-05
Bank of the West notified customers that an ATM skimming device was installed on a Campbell Branch ATM between December 3 and December 22, 2018. The device captured debit card numbers, PINs, names, expiration dates, and security codes. The bank discovered the incident on January 20, 2019, contacted law enforcement, and offered credit monitoring.
- Massachusetts State AGas victim2018-08-27
Bank of the West reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-08-27. 18 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2018-08-24
Bank of the West notified NH AG that a third-party service provider used compromised credentials to access employee email accounts, potentially exposing NH resident business names and SSNs. 4 residents affected. Incident discovered March 2, 2018. Notices mailed August 20, 2018. Forensics engaged, law enforcement notified, credit monitoring offered.
- Montana State AGas victim2018-08-20
Bank of the West notified Montana customers of a security incident involving a contracted service provider. Unauthorized parties used compromised credentials to access employee email accounts at the vendor, potentially exposing business names and Social Security numbers. The bank engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring.
- California State AGas victim2018-08-20
Bank of the West notified customers of a third-party data breach in which unauthorized parties used compromised credentials to access employee email accounts at a contracted business data analysis service provider. The incident, which occurred on March 2, 2018, potentially exposed business customer names and business identification numbers (which may include Social Security numbers). Bank of the West offered one year of free Identity Guard® credit monitoring services to affected individuals.
- Montana State AGas victim2017-12-05
Bank of the West notified customers that an employee inappropriately accessed loan documents containing personal information (name, address, SSN, driver's license, DOB). The employee was arrested by Dallas police. The bank contacted law enforcement, adjusted internal processes, and offered one year of credit monitoring.
- New Hampshire State AGas victim2017-12-05
Bank of the West notified the NH Attorney General of a breach involving 3 NH residents. An employee inappropriately accessed loan applications containing PII (SSN, DL, DOB) from a San Ramon, CA loan center. The breach was discovered on Oct 5, 2017, following an arrest at Dallas-Ft. Worth Airport. Notifications and credit monitoring offers were sent on Dec 5, 2017.
- California State AGas victim2017-05-24
Bank of the West reported an ATM skimming incident affecting customers. The breach occurred between February 1, 2017, and April 9, 2017. Financial account and credential data were compromised via physical skimming devices installed on ATMs.
- New Hampshire State AGas victim2015-03-24
Bank of the West reported a data breach involving its HIPAA Business Associate, Anthem. The breach impacted the names and Social Security Numbers of three New Hampshire residents. Anthem is providing 24 months of credit monitoring via All Clear ID.
- Massachusetts State AGas victim2014-07-17
Bank of the West reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-07-17. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2014-07-16
Bank of the West discovered an email scam in mid-May 2014 that temporarily compromised two employees' remote email login credentials. Customer data, including names, account/loan numbers, and Social Security Numbers, was potentially exposed in email messages. The bank disabled remote email access, conducted an investigation, and offered one year of identity monitoring.
- Massachusetts State AGas victim2014-02-06
Bank of the West reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-02-06. 15 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2014-02-05
Bank of the West discovered on December 19, 2013, that a retired internet job application server had been illegally accessed. Unauthorized users may have obtained user names and passwords created to access the site. The bank secured the servers, established additional security measures, and cooperated with law enforcement. Affected individuals were offered one year of free identity monitoring.
- New Hampshire State AGas victim2014-02-05
Bank of the West notified the NH Attorney General that unauthorized individuals accessed a retired internet job application on Dec 19, 2013. Approximately 3 NH residents were affected. Data included names, SSNs, driver's licenses, DOBs, and credentials. The bank engaged forensic experts, secured servers, cooperated with law enforcement, and offered 12 months of identity monitoring.