ALLY
ent_ab298a1e2a6f02498ce116f1
Disclosures
5
State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
12
as filed · State AG MT
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- ALLY
- Normalized
- ally— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- Montana State AGas victim2024-11-12
Ally notified Montana residents of a data breach on November 12, 2024, discovered September 19, 2024. A vendor call center agent accessed customer deposit account information, including SSNs, bank account numbers, and credentials, outside their job scope. Ally provided credit monitoring and reset credentials.
- Montana State AGas victim2024-08-30
Ally notified Montana residents of a data breach on August 30, 2024, involving unauthorized access to a third-party vendor's systems on August 1, 2024. The incident exposed names, SSNs, DOBs, addresses, driver's license numbers, emails, and phone numbers. Ally terminated the vendor relationship, engaged forensic investigators, and provided 3 years of credit monitoring via Sontiq/TransUnion.
- Illinois State AGas victim2024-08-01
ALLY filed a data-breach notice with the Illinois Attorney General in August 2024 (case 24-08-064). The register records the breach as discovered on August 1, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Montana State AGas victim2022-01-27
Ally notified Montana residents that a former employee accessed consumer deposit account information outside their job scope on December 22, 2021. No unauthorized transactions were identified. Affected data included names, addresses, DOB, partial SSNs, and account details. Ally provided 24 months of Equifax credit monitoring.
- Illinois State AGas victim2021-01-01
ALLY filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-221). The register records the breach as discovered on February 18, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.