Tens of thousands of people are receiving data breach alerts as two US banks disclose security lapses to their customers.
According to new filings with the Office of the Maine Attorney General, USAA Bank and the Bank of Clarke are now alerting customers involved.
USAA Bank says a “system error that occurred during a routine update to our document delivery system” led to thousands of customers’ documents being inadvertently delivered to the wrong account.
The 20th-largest commercial bank in the US by total assets says approximately 32,276 customers who use the bank’s property and casualty insurance products are affected by the data breach.
In a notice sent to each of the affected residents in the state of Maine, USAA Bank says the exposed personal information may have included: name, address, email address, date of birth, Social Security number, driver’s license number, passport number, vehicle identification number, loan numbers, health information and property and casualty insurance policy information.
USAA Bank says the breach happened on April 13th, and it was discovered on July 31st. To date, the bank says it is not aware that any of the exposed information has been misused.
Meanwhile, the Virginia-based Bank of Clarke says in a separate filing with the Office of the Maine Attorney General that an unknown and unauthorized third party accessed one of its employee’s email account more than two months ago.
According to the Bank of Clarke, approximately 1,652 of its customers are affected by the data breach, which was discovered on July 17th.
The bank has not publicly disclosed the types of personal information that has been exposed, aside from noting that it includes customers’ names.
“The investigation determined that the unauthorized party accessed the email account for a brief period on June 17, 2024, and, during that time, may have accessed and acquired emails and files contained in the email account.”
Bank of Clarke’s total asset base totals more than $1.78 billion.
Generated Image: Midjourney