Bank Data Breach Blamed on Insider As Social Security Numbers, Account Information and Addresses of 43 Customers Exposed

A US bank is blaming one of its own employees for the exposure of the sensitive data impacting dozens of customers.

According to a new filing with the Office of the Maine Attorney General, an insider at TD Bank wrongfully accessed the data of 43 customers.

The breach is reported to have occurred on June 13th, 2024, but it wasn’t discovered until this year, on March 6th.

Impacted customers are being delivered written notices.

A copy filed with the Office of the Maine Attorney General says the personal information that may have been accessed include names, dates of birth, phone numbers, addresses, account numbers, social security numbers and transactional data.

The bank says its corporate security team has launched an internal investigation in the matter and has also reached out to local law enforcement.

TD Bank is offering those impacted a free two-year enrollment to an identity protection service to affected customers.

With $372.8 billion in assets under management as of December 2024, TD Bank is the 10th largest bank in the United States.