TD Bank

The Vermont Office of the Attorney General reported that TD Bank experienced a data breach involving improper access to personal information by an employee between May and October of 2023. The affected information may include names, addresses, phone numbers, social security numbers, dates of birth, transactional data, and account numbers. The breach was reported on January 15, 2024.

Source: https://ago.vermont.gov/document/2024-01-15-td-bank-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/td

"id": "td525072625",
"linkid": "td",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Banking',
                        'name': 'TD Bank',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'phone numbers',
                                                         'social security '
                                                         'numbers',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Transactional Data']},
 'date_publicly_disclosed': '2024-01-15',
 'description': 'The Vermont Office of the Attorney General reported that TD '
                'Bank experienced a data breach involving improper access to '
                'personal information by an employee between May and October '
                'of 2023. The affected information may include names, '
                'addresses, phone numbers, social security numbers, dates of '
                'birth, transactional data, and account numbers. The breach '
                'was reported on January 15, 2024.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'social security numbers',
                                 'dates of birth',
                                 'transactional data',
                                 'account numbers']},
 'references': [{'date_accessed': '2024-01-15',
                 'source': 'Vermont Office of the Attorney General'}],
 'threat_actor': 'Employee',
 'title': 'TD Bank Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Improper Access'}