One of the five largest US banks has disclosed a massive data breach affecting 28 million customer accounts, including names, Social Security numbers, account numbers, and transaction histories.

What Was Exposed

Response and Protection

The bank is offering 3 years of free credit monitoring and identity theft protection through Experian. Customers should immediately change online banking passwords, enable multi-factor authentication, and consider placing fraud alerts on credit reports.

The breach was discovered by a third-party security firm and appears to have exploited a vulnerability in the bank's legacy mainframe systems.