Incident

Bank of America reports data breach of third party document destruction vendor


Learn More

Bank of America is reporting a data breach affecting customers following a security incident that occurred on December 30, 2024. 

According to the notification, a document destruction vendor failed to properly secure bank-related materials during transport, with some documents found outside secure containers on the exterior of a financial center.

The potentially compromised information includes:

  • First and last names
  • Addresses and property addresses
  • Phone numbers
  • Email addresses
  • Gender
  • Dates of birth
  • Social Security numbers
  • Other unique government ID numbers
  • Financial account information

The number of affected individuals is not disclosed.

While the vendor cannot confirm which specific customer documents were directly exposed, Bank of America is notifying potentially affected customers "in an abundance of caution and support." Bank of America is offering complimentary two-year membership to Experian IdentityWorks℠.

This incident follows a separate third-party breach revealed in January 2025 that exposed the data of at least 414 customers.

Bank of America reports data breach of third party document destruction vendor