Data Privacy Breach at Bank of America Under Investigation
Newtown, Pa., March 13, 2025 (GLOBE NEWSWIRE) – Edelson Lechtzin LLP, a prominent national class action law firm, is investigating potential violations of data privacy involving Bank of America. The investigation comes in light of an incident detected around December 30, 2024, when the bank identified suspicious activity on its network.
Based in Charlotte, North Carolina, Bank of America is one of the largest financial institutions in the United States, as well as globally, primarily known for its expansive banking and investment operations. The recent breach has raised serious concerns about customer data security following an event involving a vendor responsible for document destruction. This vendor reportedly failed to secure sensitive bank-related materials during transit, leading to the discovery of unsecured documents outside their designated protective containers near the institution’s financial center. Although the vendor has not confirmed the specifics surrounding the incident, the potential risk to customer information remains significant.
The breach may have compromised various types of personal data belonging to customers, potentially including names, addresses, phone numbers, email addresses, genders, dates of birth, Social Security numbers, government-issued ID numbers, and financial account information. This multifaceted array of compromised information raises alarms regarding identity theft and fraud risk for affected individuals.
Under the MITRE ATT&CK framework, this incident may involve several potential adversary tactics and techniques, particularly concerning initial access and data collection methods. The failure to secure sensitive documents during transit points to deficiencies in transport layer controls and suggests a lack of adequate safeguards against physical data theft. Given the nature of the breach, techniques associated with human error could also play a critical role, as vendor oversight and secure handling procedures are vital in protecting sensitive information.
Customers receiving notifications related to this breach are advised to take immediate action to protect their personal information. Regular monitoring of account statements and proactive scrutiny of credit reports can help identify any unauthorized activity that may arise as a consequence of this breach. The necessity for vigilance in this digital age cannot be overstated, as identity theft and fraud continue to evolve in complexity.
Edelson Lechtzin LLP is committed to seeking legal recourse for individuals whose sensitive data might have been jeopardized by this data breach, emphasizing the importance of accountability in the handling of personal information by financial institutions. As the investigation progresses, affected customers are encouraged to stay informed and actively manage their data privacy.
For further inquiries regarding this incident or legal representation, Marc H. Edelson, Esq. at Edelson Lechtzin LLP can be contacted directly via phone or email. The firm continues to address issues associated with data breaches and seeks justice for all affected parties.
Edelson Lechtzin LLP specializes not only in data breach cases but also in a broad range of class action lawsuits, including securities fraud, antitrust violations, and consumer protection claims. As the cybersecurity landscape continues to evolve, the firm remains a vital resource for individuals seeking to navigate these increasingly complex issues.
