Bank of America Customers Exposed As ‘Unauthorized Party’ Accesses Social Security Numbers, Names, Locations and Financial Data in Third-Party Breach

Bank of America says a third-party breach has exposed the sensitive data of hundreds of customers.

According to a new filing with the Office of the Maine Attorney General, an unidentified third-party software provider has discovered an unauthorized entity gained access to its systems.

The security breach happened in October and although BofA’s systems were not directly impacted, the sensitive data of at least 414 customers is now at risk.

The bank is sending notices to affected customers, stating the breach is related to mortgage loans and the data at risk includes customers’ names, social security numbers, addresses, phone numbers, passport numbers and loan numbers.

“Your security is our priority. We understand how upsetting this can be and sincerely apologize for this incident and any concerns or inconvenience it may cause. We are notifying you so we can work together to protect your personal and account information.”

Bank of America says it’s monitoring accounts to minimize any financial impact and scan for unauthorized transactions.

The bank is also offering customers a free one-year enrollment to an identity protection service to affected customers.

A new report from research firm SecurityScorecard found 97% of the top 100 US banks suffered third-party data breaches last year, as lenders increasingly rely on outside vendors to manage core banking functions.

Generated Image: Midjourney