BANK OF AMERICA CORPORATION

Bank of America notified Massachusetts residents of a data breach occurring on or about April 7, 2026. Trust tax return documents containing names, addresses, Social Security numbers, and account numbers were damaged in transit and subsequently returned to the bank. The incident involved both living customers and a decedent (Mary Mitchell). Bank of America conducted internal investigations, is monitoring accounts, and offered affected individuals a complimentary two-year identity theft protection membership through Experian IdentityWorks.

Bank of America notified Massachusetts residents of a cybersecurity incident occurring on May 8, 2026, involving an isolated mailing error. Customer information, including names, addresses, dates of birth, Social Security numbers, and account numbers, was disclosed. The bank implemented heightened security, monitors accounts for suspicious activity, and offers two years of complimentary identity theft protection via Experian IdentityWorks.