On August 20, 2018, the California Office of the Attorney General reported a data breach involving Bank of the West that occurred on March 2, 2018. Unauthorized third parties accessed employee email accounts at a contracted service provider, potentially affecting personal information including business names and Social Security numbers linked to businesses. The number of affected individuals is unknown.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-139041
TPRM report: https://www.rankiteo.com/company/bank-of-the-west
"id": "ban421080525",
"linkid": "bank-of-the-west",
"type": "Breach",
"date": "3/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Banking',
'name': 'Bank of the West',
'type': 'Financial Institution'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Business names',
'Social Security numbers']},
'date_detected': '2018-03-02',
'date_publicly_disclosed': '2018-08-20',
'description': 'Unauthorized third parties accessed employee email accounts '
'at a contracted service provider, potentially affecting '
'personal information including business names and Social '
'Security numbers linked to businesses.',
'impact': {'data_compromised': ['Business names', 'Social Security numbers']},
'initial_access_broker': {'entry_point': 'Email Account Compromise'},
'references': [{'date_accessed': '2018-08-20',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Unauthorized third parties',
'title': 'Bank of the West Data Breach',
'type': 'Data Breach'}