DisclosureLens
State AGConfirmed4 filings · 1 stateLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Merged incident · 4 filings

BANK OF AMERICA CORPORATION — July 2026 breach

Clustered 4 filings across 1 jurisdiction · filing window Aug 1, 2026 Sep 1, 2026. View entity profile → Other incidents for this victim →

Determination

Confirmed

Members

4 filings

States

1

Affected · reported

First → last filing

Aug 1, 2026 Sep 1, 2026

Merge confidence

99%

incident inc_2b1497fae20440e1 · merged by deterministic · confidence 99%

Confirmed breach. Merged as one breach: 4 regulatory filings. The filings describe a misconfiguration. Intrusion Jul 1, 2026–Sep 3, 2026, discovered Sep 3, 2026. Data reported: Government ID, Identity (basic), Financial account, and 1 more. Notifications rolled out on a 31-day schedule across 4 filings beginning Aug 1, 2026. Each member filing remains the legal record for its jurisdiction.

Litigation Timing

Supplemental
Filing span
31days

Time between earliest and latest filing

Not recorded for this incident

Discovery variance · Leak precedence · Materiality delta · SEC filing delayno leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.

The weekly clock on records like this one

The Disclosure Clock is a weekly briefing on what landed in the disclosure record, and the gap between the criminals' post and the regulator's filing — measured on the whole record, with the method shown.

Weekly. Double opt-in, one-click unsubscribe, and the address goes nowhere else.

Bank of America Corporation data breach (2026) · DisclosureLens