State Street Corporation data breach (2024)

Breach window

May 27, 2023 → May 31, 2023

When the intrusion reportedly occurred, per the linked filings

207 days

Breach discoveredletter-grounded

Dec 20, 2023

Reported by NEW HAMPSHIRE AG filing

42 days

⛰️New Hampshire State AGFirst filinglinked via multistate filing link · 100%

Filed Jan 31, 2024bd_bef5c97e12364fef

State Street Corporation notified the NH AG of a breach involving its third-party provider Fiserv. An unauthorized actor exploited a vulnerability in MOVEit Transfer between May 27-31, 2023, accessing check images containing financial account info for one NH resident. State Street discovered the incident on Dec 20, 2023, and notified the individual on Jan 31, 2024. Remediation included patching and offering credit monitoring.

Affected (this filing):

🏎️Indiana State AGMost recent

Filed Feb 1, 2024bd_8e6752fdd7e9fdd7

State Street, et al reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2024-02-01. 15 Indiana residents were affected. 1,136 individuals affected in total.

Affected (this filing): 1,136

STATE STREET CORPORATION

Litigation Timing

Timeline