Billion-Dollar Bank Says Account Numbers, Names and Other Sensitive Info Exposed As Insider Triggers New Data Breach

The tenth-largest bank in the US by total assets just disclosed a new cybersecurity incident that’s affecting customers’ data.

In a filing with the Massachusetts state government, TD Bank says it recently discovered that a former employee accessed and shared sensitive personal information belonging to customers between August of 2022 and December of the same year.

“The employee has since been terminated, and there is an active investigation underway in partnership with law enforcement.”

According to TD Bank, the data impacted may have included the names, contact information, dates of birth, account numbers and transactional data of customers.

“This incident is being investigated by our corporate security team and we are also engaged and partnering with local law enforcement.”

Although the bank has not released the number of customers whose data has been exposed, at least eight customers in the state of Massachusetts are affected.

Following the incident, the billion-dollar lender is offering a complimentary membership to an online fraud prevention and detection service. TD Bank is also simplifying the process of closing and opening accounts.

“If you want added protection for your money at TD Bank and would like to close your existing account(s) and open new account(s), we’ll make it as simple as possible.”

And depending on the state of residence, TD Bank customers can also place a security freeze on their credit reports with the three major US consumer reporting agencies.

As of September 30th of 2024, TD Bank had close to $400 billion in total assets, according to the Federal Reserve.

Generated Image: Midjourney