Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.
A ransomware group known as Storm has claimed responsibility for a cyberattack on Poca Valley Bank, raising concerns that customer financial and personal information may have been accessed.
Poca Valley Bank Data Breach Exposes Customer Financial Information Read More »
PeoplesBank notified the Vermont Attorney General that a data breach exposed government ID numbers and biometric information, though the full scope has not been made public.
PeoplesBank Data Breach Exposes Government ID Numbers and Biometric Information Read More »
Bee, Bergvall & Co notified the Vermont Attorney General of a data breach exposing Social Security numbers, financial account codes, and credit and debit account information.
OneMain Financial Group, LLC notified the California Attorney General of a data breach that may have exposed customers’ personal and financial information. Here’s what affected individuals need to know.
OneMain Financial Group, LLC Data Breach Exposes Personal and Financial Information Read More »
Ladenburg Thalmann & Co. Inc. notified the Vermont Attorney General of a data breach exposing Social Security numbers, government ID numbers, and financial account information belonging to its clients.
A ransomware group known as Wallstreet has claimed responsibility for a data breach at Tobin & Company, a New York accounting firm, allegedly exposing client financial and tax records.
Tobin & Company Data Breach Exposes Client Financial and Tax Information Read More »
Fairwinds Credit Union notified the California Attorney General of a data breach that may have exposed members’ personal and financial information, prompting concerns about identity theft and fraud.
Fairwinds Credit Union Data Breach Exposes Personal and Financial Information Read More »
Corpay, Inc. notified the Vermont Attorney General of a data breach involving government ID numbers, prompting questions about how many people are affected.
Corpay, Inc. Data Breach Exposes Government ID Numbers Read More »
theLender, a US wholesale mortgage company, suffered a ransomware attack attributed to the Termite group, raising concerns that customer personal and financial information was accessed or stolen.
theLender Data Breach Exposes Customer Personal and Financial Information Read More »
A ransomware group known as Storm claims to have targeted The Money Store, a New Jersey mortgage lender, raising concerns that borrowers’ sensitive financial and personal data was accessed.
The Money Store Data Breach Exposes Sensitive Financial and Personal Information Read More »