People search Bank of America data breach timeline because the brand sits on billions of accounts, credentials, and cloud workloads. BreachHistory indexes 9 Bank of America-linked incidents, with headline counts up to 1.2M+ in catalog rows. This page maps every attested event through 2026 with internal links to canonical records.
Why Bank of America breach history matters
Bank of America operates in Finance (United States). Across indexed rows, recurring themes include ransomware and extortion, third-party and supply-chain exposure, unverified actor or scraping claims. Understanding the chronological pattern helps security teams, customers, and regulators separate confirmed disclosures from forum marketing.
Full timeline through 2026
2023 — 57k
Cataloged incident. LockBit ransomware attacked Infosys McCamish Systems, third-party vendor. Deferred compensation plan customers; names, addresses, DOB, SSNs, account info exposed. Customers notified 90 days later. Exposed categories include Names, Addresses, Social Security numbers, Dates of birth. BreachHistory cites approximately 57K+ affected records in this row. See the boa2023 and canonical BreachHistory entry.
2014 — — Bank of America: name, ssn Location of breached information: Website…
Cataloged incident. name, ssn Location of breached information: Website Business associate present: No Exposed categories include Personal information. BreachHistory cites approximately 26 affected records in this row. See the bank-of-america2014 and canonical BreachHistory entry.
2011 — — Bank of America: An unknown number of customers were able to see the…
Cataloged incident. An unknown number of customers were able to see the information of other customers when attempting to access their accounts online. The problem appeared to involve customers who had the same last name. The mistake exposed information for credit, mortgage and home equity accounts. All access to problem accounts was suspended within hours of the discovery. Exposed categories include Personal information. No attested victim count is published for this row yet. See the bank-of-america2011 and canonical BreachHistory entry.
2010 — — Bank of America: An IT staff member of Bank of America pled guilty…
Cataloged incident. An IT staff member of Bank of America pled guilty to installing illegal software on Bank of America ATMs. The software caused the ATMs to erroneously dispense money; some of it may have affected customer accounts. Exposed categories include Personal information. No attested victim count is published for this row yet. See the bank-of-america2010 and canonical BreachHistory entry.
2009 — — Bank of America: Charlotte-based BofA (NYSE:BAC) and Citigroup…
Cataloged incident. Charlotte-based BofA (NYSE:BAC) and Citigroup (NYSE:C) each recently issued replacement cards to consumers, telling them that their account numbers may have been compromised. Account information from certain Bank of America debit cards may have been compromised at an undisclosed third-party location. Bank officials are not certain if this is a new breach or a previously disclosed one. Exposed categories include Personal information. No attested victim count is published for this row yet. See the bank-of-america2009 and canonical BreachHistory entry.
2007 — — Bank of America: A laptop containing personal information of…
Cataloged incident. A laptop containing personal information of current, former and retired employees including names, addresses, dates of birth and Social Security numbers was stolen when an employee was a victim of a recent break-in. A limited number of people were affected. Exposed categories include Personal information. No attested victim count is published for this row yet. See the bank-of-america2007 and canonical BreachHistory entry.
2006 — — Bank of America: A former contractor for Bank of America…
Cataloged incident. A former contractor for Bank of America unauthorizedly accessed the personal information (name, address, phone number, Social Security number) of an undisclosed number of customers, for the purpose of committing fraud. Exposed categories include Personal information. No attested victim count is published for this row yet. See the bank-of-america2006 and canonical BreachHistory entry.
2005 — — 1.2M records
Cataloged incident. Lost media. 1.2M records. Exposed categories include Names, emails, addresses, and other PII. BreachHistory cites approximately 12 affected records in this row. See the bank-of-america2005 and canonical BreachHistory entry.
2005 — — Bank of America: Lost / stolen device, 1,200,000 records
Cataloged incident. Data breach reported. financial organization. Method: lost / stolen media. Source: Wikipedia List of data breaches. Exposed categories include Personal and demographic data. BreachHistory cites approximately 1.2M+ affected records in this row. See the bank-of-america2005-1200000-wiki2 and canonical BreachHistory entry.
Patterns and analysis
- Ransomware and extortion — appears across multiple Bank of America catalog entries; prioritize controls that address this class of failure.
- Third-party and supply-chain exposure — appears across multiple Bank of America catalog entries; prioritize controls that address this class of failure.
- Unverified actor or scraping claims — appears across multiple Bank of America catalog entries; prioritize controls that address this class of failure.
- Record-count hygiene — BreachHistory indexes actor-cited figures separately from company-confirmed totals; read each row's technicalWriteup before treating counts as fact.
- 2026 monitoring — New disclosures roll into this timeline as they are verified or labeled unverified per catalog policy.
What to do if you may be affected
- Step 1: Enable phishing-resistant MFA on every account tied to this brand.
- Step 2: Use unique passwords and a password manager—breach rows often involve credential reuse.
- Step 3: Monitor official company breach notices and regulator filings, not dark-web downloads.
- Step 4: Bookmark the Bank of America company page for new 2026+ disclosures.
Canonical BreachHistory hub
Explore every indexed row: breachhistory.com/bank-of-america · Latest: boa2023.
Sources: BreachHistory catalog (9 rows for Bank of America), company and regulator disclosures cited in individual breach records.