Bank of America

7 breaches1.8M affected in allFinancebankofamerica.com

Infosys McCamish ransomware attack exposes Bank of America plan participantsVendor breach exposed names, addresses, emails, dates of birth, Social Security numbers and financial details. Reported to the Delaware DOJ.Vendor breach57K affectedFinanceUSFeb 1, 2024 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.495K affectedFinanceUSMar 28, 2023 Breach, details not statedBreach notice filed with the California AG, details not stated.FinanceUSMay 18, 2020 Breach, details not statedExposed names, payment cards, emails, phone numbers and addresses. Reported to the Maine AG.FinanceUSApr 9, 2018 Breach, details not statedExposed names and payment cards. Reported to the Maine AG.FinanceUSMay 20, 2015 Breach, details not statedExposed names and payment cards. Reported to the Maine AG.FinanceUSOct 8, 2014 Lost backup tapes held data on 1.2 million federal charge card holdersLost or stolen device exposed names, Social Security numbers and financial details.Lost or stolen device1.2M affectedFinanceUSUnverifiedFeb 25, 2005

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

Added2026-09-25

Bank of America, 2014-10-08

Added2026-09-25

Bank of America, 2015-05-20

disclosed2026-09-25

Bank of America, 2018-04-092018-04-09

data_types2026-09-25

Bank of America, 2018-04-09["names","payment-card","emails","phone","addresses"]

disclosed2026-09-25

Bank of America, 2018-04-092018-04-17

Added2026-09-25

Bank of America, 2018-04-09

Added2026-09-25

Bank of America, 2023-03-28

source2026-09-25

Bank of America, 2024-02-01https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdf

Added2026-09-25

Bank of America, 2005-02-25

attack2026-09-25

Bank of America, 2024-02-01third-party

data_types2026-09-25

Bank of America, 2024-02-01["names","addresses","emails","dob","ssn","financial"]

summary2026-09-25

Bank of America, 2024-02-01Bank of America notified deferred compensation plan participants that service provider Infosys McCamish Systems was hit by a cyberattack around November 3, 2023, and told the bank on November 24 that plan data may have been compromised. Ban

title2026-09-25

Bank of America, 2024-02-01Infosys McCamish ransomware attack exposes Bank of America plan participants

domain2026-09-25

Bank of Americabankofamerica.com

Added2026-09-25

Bank of America, 2024-02-01

Added2026-09-25

Bank of America, 2020-05-18

Added2026-09-25

Bank of America