United Services Automobile Association

USAA disclosed a data breach affecting California members due to a system error during a routine update to its document delivery system between April 13 and April 30, 2024. The error resulted in the inadvertent posting of some members' documents, including PII, PHI, and financial data, to other members' online accounts. USAA removed the documents, investigated the incident, and enhanced IT change management processes. Affected individuals were offered two years of Experian IdentityWorks.

USAA notified Vermont consumers of a data incident where unauthorized individuals accessed member information via stolen credentials from a third-party call center provider. The incident occurred between Dec 2022 and May 2023. Affected data included names, addresses, DOB, driver's license numbers, partial SSNs, bank account numbers, and PINs. USAA blocked access, is monitoring accounts, and offered two years of Experian IdentityWorks.

USAA reported that call center representatives of a third-party service provider improperly shared USAA access credentials with unauthorized individuals between December 20, 2022, and May 18, 2023. This allowed unauthorized access to personal information of USAA members, including names, addresses, driver's license numbers, last four digits of SSNs, bank account numbers, and authentication PINs. USAA blocked the access and is monitoring accounts. Complimentary identity monitoring services were offered to affected adults and minors.

United Services Automobile Association reported a data breach to the Montana Attorney General. The breach was reported on 2021-06-03. The breach occurred on 5/6/2021. 2 Montana residents were affected.