Incident

Encore Bank reports data breach caused by compromised employee email

Take action: Another reminder to enforce MFA. Simple controls are very valuable.


Learn More

On January 31, 2024, Encore Bank, a financial services company, reported a data breach involving an unauthorized party accessing an employee's email account. This resulted in the exposure of sensitive information belonging to several consumers.

Encore Bank secured its email system and launched an investigation with cybersecurity specialis. The investigation confirmed unauthorized access to emails and attachments containing confidential consumer data, including:

  • Names
  • Social Security numbers
  • Financial account information
  • Driver's license numbers

The number of affected individuals is not disclosed.

On January 31, 2024, Encore Bank sent data breach notification letters to impacted individuals, detailing the compromised information.

Encore Bank reports data breach caused by compromised employee email