Skip to content

TD Bank

Disclosed Feb 18, 201313 years ago260,000 affectedSettled

Official notice

Lost unencrypted backup tapes held 260,000 customers' data; USD 850,000 settlement

In 2012 TD Bank reported losing unencrypted backup tapes in Massachusetts holding 1.4 million files with personal information of 260,000 customers, including 31,407 New Yorkers. Nine state attorneys general settled for USD 850,000 and required security reforms.

What is known

People affected260,000 (as reported by the organization)
DisclosedFeb 18, 2013
HappenedDec 30, 2014
AttackLost or stolen device
Data exposedNames, Social Security numbers, Financial, Other, Addresses, Payment cards, Dates of birth
SectorFinance · US
StatusSettled
Lawsuit or fineUSD 850,000 nine-state AG settlement (Oct 2014) (about $850K)

Sources

Source
NY AG: Multi-state settlement with TD Bank over data breachag.ny.gov · Regulator
Maine Attorney General breach notice archive: TD Bankmaine.gov · Official notice

Notices filed

WhereFiledPeople
Maine AGresidents of MEFeb 18, 2013267
Maine AGresidents of MEMay 15, 20132
Maine AGresidents of MEOct 17, 2013516
Maine AGresidents of MEOct 29, 20134
Maine AGresidents of MENov 21, 20131
Maine AGresidents of MENov 27, 20131
Maine AGresidents of MEDec 16, 20131
Maine AGresidents of MEJan 24, 20145
Maine AGresidents of MEFeb 11, 201434
Maine AGresidents of MEFeb 18, 20141
ResearchtotalOct 15, 2014260,000
Maine AGresidents of MENov 25, 20141
Maine AGresidents of MEFeb 20, 20152
Maine AGresidents of MEJul 10, 20151
Maine AGresidents of MESep 3, 20151

Other breaches at TD Bank

BreachAffected
Disclosed Jan 15, 2024Jan 15, 20242 years agoUnknown
Disclosed Sep 28, 2022Sep 28, 20223 years agoUnknown
Disclosed Dec 16, 2021Dec 16, 20214 years ago37
Disclosed Mar 2, 2020Mar 2, 20206 years ago577
Disclosed Aug 4, 2016Aug 4, 201610 years agoUnknown
Disclosed Oct 8, 2012Oct 8, 201213 years agoUnknown
History of this record
  • 2026-09-25 · disclosed: 2013-05-15 to 2013-02-18 · backfill source
  • 2026-09-25 · disclosed: 2013-10-17 to 2013-05-15 · backfill source
  • 2026-09-25 · disclosed: 2013-10-29 to 2013-10-17 · backfill source
  • 2026-09-25 · data_types: ["names","ssn","financial","other","addresses","payment-card"] to ["names","ssn","financial","other","addresses","payment-card","dob"] · backfill source
  • 2026-09-25 · disclosed: 2013-11-21 to 2013-10-29 · backfill source
  • 2026-09-25 · disclosed: 2013-11-27 to 2013-11-21 · backfill source
  • 2026-09-25 · disclosed: 2013-12-16 to 2013-11-27 · backfill source
  • 2026-09-25 · data_types: ["names","ssn","financial","other","addresses"] to ["names","ssn","financial","other","addresses","payment-card"] · backfill source
  • 2026-09-25 · disclosed: 2014-01-24 to 2013-12-16 · backfill source
  • 2026-09-25 · disclosed: 2014-02-11 to 2014-01-24 · backfill source
  • 2026-09-25 · disclosed: 2014-02-18 to 2014-02-11 · backfill source
  • 2026-09-25 · disclosed: 2014-10-15 to 2014-02-18 · backfill source
  • 2026-09-25 · occurred: empty to 2014-12-30 · backfill source
  • 2026-09-25 · data_types: ["names","ssn","financial","other"] to ["names","ssn","financial","other","addresses"] · backfill source
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about TD Bank

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.