The California Office of the Attorney General disclosed a data breach affecting **HSBC Bank USA, National Association** between **October 4, 2018, and October 14, 2018**. The incident involved unauthorized access to systems containing **personal information**, though the exact number of impacted individuals remains undisclosed. While the specific types of compromised data were not detailed in the report, breaches of this nature typically expose sensitive customer details such as **names, account numbers, addresses, or financial records**. The breach was formally reported on **November 2, 2018**, highlighting vulnerabilities in the bank’s data protection measures. No evidence suggested the misuse of the exposed data for fraud or financial harm at the time of disclosure, but the potential for identity theft or phishing attacks remained a concern. HSBC likely initiated internal investigations and remediation efforts, including customer notifications and regulatory compliance steps, to mitigate risks and restore trust.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-141394
TPRM report: https://www.rankiteo.com/company/hsbc
"id": "hsb019090625",
"linkid": "hsbc",
"type": "Breach",
"date": "10/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Banking',
'location': 'USA (California)',
'name': 'HSBC Bank USA, National Association',
'type': 'Financial Institution'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2018-10-14',
'date_publicly_disclosed': '2018-11-02',
'description': 'The California Office of the Attorney General reported a data '
'breach involving HSBC Bank USA, National Association. The '
'breach occurred between October 4, 2018, and October 14, '
'2018, potentially affecting various personal information '
'types, although the specific number of affected individuals '
'is unknown.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'date_accessed': '2018-11-02',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'title': 'HSBC Bank USA Data Breach (2018)',
'type': 'Data Breach'}