In April 2016, Discover Financial Services experienced a data breach that was publicly reported by the California Office of the Attorney General on June 23, 2017. The incident involved unauthorized access to **Discover card account information**, though the exact scope of the compromised data—such as whether it included card numbers, security codes, or personal details—was not disclosed. In response, Discover took remedial action by issuing **new cards with updated security codes and expiration dates** to affected customers. While the breach did not result in confirmed financial fraud or identity theft at the time of reporting, the exposure of payment card details posed a risk of potential misuse. The incident highlighted vulnerabilities in Discover’s data protection measures, necessitating proactive steps to mitigate harm to customers. The lack of transparency regarding the specific data compromised added uncertainty to the severity of the breach’s long-term impact on affected individuals.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-99829
TPRM report: https://www.rankiteo.com/company/discover-financial-services
"id": "dis041090625",
"linkid": "discover-financial-services",
"type": "Breach",
"date": "4/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Banking/Credit Cards',
'location': 'United States (California)',
'name': 'Discover Financial Services',
'type': 'Financial Services'}],
'customer_advisories': ['New cards with updated security codes and expiration '
'dates were issued to affected customers'],
'data_breach': {'sensitivity_of_data': 'High (payment card data)',
'type_of_data_compromised': ['Discover card account '
'information']},
'date_publicly_disclosed': '2017-06-23',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Discover Financial Services. The breach '
'occurred on April 5, 2016, and involved Discover card account '
'information, though specific details about what data was '
'compromised are unknown. As a response, new cards with new '
'security codes and expiration dates were issued to affected '
'customers.',
'impact': {'data_compromised': True, 'payment_information_risk': True},
'references': [{'date_accessed': '2017-06-23',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'response': {'law_enforcement_notified': True,
'remediation_measures': ['Issuance of new cards with updated '
'security codes and expiration dates to '
'affected customers']},
'title': 'Discover Financial Services Data Breach (2016)',
'type': 'Data Breach'}