Scotiabank

A third-party vendor has confirmed to Scotia Trust that a cybersecurity breach has exposed some of their clients' information.

In order to assess the effect to your information and provide whatever information we can to aid in the investigation, the organisation claimed that they have been in continuous touch with EY.

According to EY, information about associated people including name, date of birth, address, phone number, social security number, driver's licence number, and/or passport number has been made public.

Investment holdings and account balances were not made public, and this breach did not immediately compromise Scotiabank systems.

Source: https://www.google.com/url?q=https://www.mass.gov/doc/assigned-data-breach-number-30128-scotia-wealth-management/download&sa=D&source=editors&ust=1692218768976194&usg=AOvVaw0IWEYcW0iZddw6Qj0EIMOA

TPRM report: https://scoringcyber.rankiteo.com/company/scotiabank

"id": "sco11517823",
"linkid": "scotiabank",
"type": "Breach",
"date": "07/2023",
"severity": "50",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Finance',
                        'name': 'Scotia Trust',
                        'type': 'Financial Services'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': ['Name',
                                                         'Date of Birth',
                                                         'Address',
                                                         'Phone Number',
                                                         'Social Security '
                                                         'Number',
                                                         "Driver's Licence "
                                                         'Number',
                                                         'Passport Number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'A third-party vendor has confirmed to Scotia Trust that a '
                "cybersecurity breach has exposed some of their clients' "
                'information. The organisation claimed that they have been in '
                'continuous touch with EY to assess the effect and provide '
                'information to aid in the investigation. According to EY, '
                'information about associated individuals including name, date '
                'of birth, address, phone number, social security number, '
                "driver's licence number, and/or passport number has been made "
                'public. Investment holdings and account balances were not '
                'made public, and this breach did not immediately compromise '
                'Scotiabank systems.',
 'impact': {'data_compromised': ['Name',
                                 'Date of Birth',
                                 'Address',
                                 'Phone Number',
                                 'Social Security Number',
                                 "Driver's Licence Number",
                                 'Passport Number']},
 'response': {'third_party_assistance': ['EY']},
 'title': 'Cybersecurity Breach Exposes Client Information at Scotia Trust',
 'type': 'Data Breach'}