Where does the Bank of America case file come from?

Every entry is taken from the breach report Bank of America lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Bank of America Data Breach

This file collects the dated facts on record for the Bank of America incident. The state report is dated March 4, 2026.

Timeline

March 4, 2026Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: March 4, 2026
Receiving office: Massachusetts Attorney General

Case notes

On March 4, 2026, Bank of America submitted a data breach notification to the Office of the Massachusetts Attorney General. This public filing confirms that the institution experienced a security incident involving personal information, though the specific nature of the breach and the number of affected individuals remain unspecified in the report.

As a prominent financial services provider, Bank of America routinely manages a significant volume of customer data. While the specific categories of information involved in this particular incident were not detailed in the filing, such data typically includes various identifiers and sensitive personal records.

Individuals whose information was potentially compromised in this event should be aware of the increased risk of unauthorized access or misuse of their data. This can include potential attempts at identity theft or other fraudulent activities that exploit exposed personal details.

It is advisable for anyone who believes they might be affected to carefully monitor their financial accounts for any unusual or unrecognized transactions. Regularly reviewing bank statements, credit card activity, and other financial records is a recommended practice.

Consider placing a fraud alert with the major credit bureaus—Equifax, Experian, and TransUnion—which can make it more difficult for fraudsters to open new accounts in your name. Additionally, be vigilant against unsolicited communications, such as emails or calls, that request personal or account details, as these could be phishing attempts related to the breach.

The investigation into the incident is currently ongoing, as noted in the official filing. Further details regarding the breach may become available as the investigation progresses through official notifications or public updates.

Questions about this case file

Where does the Bank of America case file come from?: Every entry is taken from the breach report Bank of America lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Bank of America breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files