HSBC BANK USA, NATIONAL ASSOCIATION

HSBC Card and Retail Services and HSBC Bank Nevada, N.A. notified the New Hampshire Attorney General on April 25, 2008, of a security incident involving its website's 'Forgot Login Password' page. Unauthorized third parties exploited a scripting vulnerability to view account information using account numbers and the last four digits of Social Security numbers. The incident affected 19 New Hampshire residents. HSBC strengthened authentication, issued new account numbers, and provided one year of credit monitoring.

Affected (this filing): 19