SunTrust

SunTrust's 1.5 million customers whose information has been stolen by a former employee.

SunTrust Banks, Inc. is now offering Identity Protection for all current and new consumer clients at no cost on an ongoing basis.

Certain information, such as name, address, phone number, and account balances may have been exposed.

The contact lists did not include personally identifying information, such as social security number, account number, PIN, User ID, password, or driver’s license information.

Source: https://www.databreaches.net/suntrust-1-5-million-customers-whose-information-may-have-been-stolen-by-former-employee/

TPRM report: https://scoringcyber.rankiteo.com/company/suntrust-bank

"id": "sun155126622",
"linkid": "suntrust-bank",
"type": "Data Leak",
"date": "04/2018",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1.5 million',
                        'industry': 'Banking',
                        'name': 'SunTrust Banks, Inc.',
                        'size': 'Large',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'number_of_records_exposed': '1.5 million',
                 'personally_identifiable_information': 'No sensitive PII such '
                                                        'as social security '
                                                        'number, account '
                                                        'number, PIN, User ID, '
                                                        'password, or driver’s '
                                                        'license information',
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Name',
                                              'Address',
                                              'Phone Number',
                                              'Account Balances']},
 'description': 'Data breach involving the theft of personal information of '
                '1.5 million customers by a former employee.',
 'impact': {'brand_reputation_impact': 'Significant',
            'data_compromised': ['name',
                                 'address',
                                 'phone number',
                                 'account balances'],
            'identity_theft_risk': 'High'},
 'motivation': 'Data Theft',
 'response': {'remediation_measures': 'Offering Identity Protection for all '
                                      'current and new consumer clients at no '
                                      'cost on an ongoing basis'},
 'threat_actor': 'Former Employee',
 'title': 'SunTrust Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Internal Access'}