Ally Bank

Ally Bank notified Massachusetts and New York residents of a data breach discovered on April 13, 2026. An unauthorized non-Ally employee was inappropriately provided access to customer deposit accounts. Exposed data included names, addresses, SSNs, DOBs, bank account numbers, and transaction details. Ally revoked the employee's access, offered new account numbers, implemented fraud monitoring, and engaged Sontiq (TransUnion) to provide three years of identity theft services.