Where does the Discover case file come from?

Every entry is taken from the breach report Discover lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Discover Data Breach

This file collects the dated facts on record for the Discover incident. The state report is dated July 23, 2025.

Timeline

July 23, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: July 23, 2025
Receiving office: Massachusetts Attorney General

Case notes

Discover, a prominent American financial services institution known for its credit cards, loans, and banking products, reported a security incident to the Massachusetts Attorney General on July 23, 2025. This filing acknowledges a breach that could impact individuals whose personal information was entrusted to the company.

The official filing did not specify the exact nature of the security incident or the precise categories of personal information exposed. While the details of the breach type and the specific data involved remain under investigation, the incident highlights potential vulnerabilities within the company's digital infrastructure or its third-party vendor network.

As a financial institution handling a vast amount of sensitive customer data, Discover's report of a security incident is a serious concern. When personal information managed by such an entity is compromised, affected individuals face potential risks such as identity theft, unauthorized account access, and various forms of financial fraud.

To help protect yourself after a data breach, it is crucial to remain vigilant. Regularly review your financial account statements and credit reports for any suspicious or unauthorized activity. You may also consider placing a fraud alert or a credit freeze on your credit files with the major credit bureaus (Equifax, Experian, and TransUnion).

Additionally, be cautious of unsolicited communications, such as emails, phone calls, or texts, that request personal details. Always verify the authenticity of any request for information directly with the known organization through official channels. Acting promptly on data breach notifications helps you mitigate potential harm and safeguard your information.

Questions about this case file

Where does the Discover case file come from?: Every entry is taken from the breach report Discover lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files