The California Office of the Attorney General disclosed a data breach affecting **Discover Financial Services** in June 2023, though the incident itself occurred on **September 11, 2014**. The breach involved unauthorized exposure of **Discover card account information**, though the exact types of compromised data—such as card numbers, expiration dates, CVV codes, or customer identities—were not publicly specified. While no immediate evidence suggested large-scale fraud or misuse of the exposed data, the incident raised concerns over potential financial fraud, identity theft, or phishing attacks targeting affected cardholders. The delayed disclosure (nearly **nine years** after the breach) further amplified scrutiny over Discover’s data protection practices and regulatory compliance. The lack of clarity on the scope of stolen data left customers uncertain about their exposure to risks, though no widespread financial harm was reported at the time of the announcement.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-99830
TPRM report: https://www.rankiteo.com/company/discover-financial-services
"id": "dis1011090725",
"linkid": "discover-financial-services",
"type": "Breach",
"date": "9/2014",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Banking/Credit Cards',
'location': 'United States (California)',
'name': 'Discover Financial Services',
'type': 'Financial Services'}],
'data_breach': {'data_exfiltration': True,
'sensitivity_of_data': 'High (potential payment information)',
'type_of_data_compromised': ['Discover card account '
'information']},
'date_publicly_disclosed': '2017-06-23',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Discover Financial Services on June 23, '
'2017. The breach occurred on September 11, 2014, potentially '
'exposing Discover card account information, though specific '
'types of data stolen remain unknown.',
'impact': {'data_compromised': True, 'payment_information_risk': True},
'references': [{'date_accessed': '2017-06-23',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'title': 'Discover Financial Services Data Breach (2014)',
'type': 'Data Breach'}