Breachesby GlyphWestern Alliance Bank
Disclosed Mar 14, 202521,899 affectedConfirmed
Cleo zero-day breach exposes 21,899 Western Alliance Bank customers
Western Alliance Bank said attackers exploited a zero-day in a vendor's file transfer software (Cleo) to take files between October 12 and 24, 2024, and notified 21,899 customers.
What is known
| People affected | 21,899 (as reported by the organization) |
|---|---|
| Disclosed | Mar 14, 2025 |
| Discovered | Jan 27, 2025 |
| Happened | Oct 12, 2024 |
| Attack | Supply chain |
| Data exposed | NamesSocial Security numbersFinancialDates of birthGovernment IDs |
| Sector | Finance · US |
| Status | Confirmed |
| Part of | Cleo (2024) |
Sources
Notices filed
Same campaign
History of this record
empty to cleo-2024by seedSource
ransomware to supply-chainby seedSource
[] to ["names","ssn","financial","dob","government-id"]by seedSource
empty to organizationby seedSource
empty to 21899by seedSource
empty to Western Alliance Bank said attackers exploited a zero-day in a vendor's file transfer software (Cleo) to take files between October 12 and 24, 2024, and notified 21,899 customers.by seedSource
empty to Cleo zero-day breach exposes 21,899 Western Alliance Bank customersby seedSource
unknown to ransomwareby backfillSource
empty to 2025-01-27by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.