In May 2023, BNY Mellon experienced a data breach involving unauthorized access to confidential information. In response, the company conducted an investigation, notified affected individuals, and provided complimentary credit monitoring services. Currently, BNY Mellon is unaware of any misuse of the accessed information.

How many accounts were compromised?

The breach impacted data related to 12.5 million individuals.

What data was leaked?

The data exposed in the breach included consumers' names, addresses, dates of birth, and Social Security numbers.

How was BNY Mellon hacked?

Attackers breached BNY Mellon's data by exploiting a third-party IT system, leading to unauthorized access to confidential information. The specific methods used by the hackers remain unclear, as the available sources do not provide further details on the breach's technical aspects.

BNY Mellon's solution

In response to the hack, BNY Mellon took several measures to secure its platform and prevent future incidents. These actions included hiring an independent consultant to review their security measures and implementing a program to transfer confidential data within the bank via electronic encryption, minimizing the need for data storage tapes. While the specific details of enhanced security protocols remain unclear, the bank has also set up a website for customers to access additional information about the breach and is offering two years of free credit monitoring, $25,000 worth of identity theft insurance, and a free credit freeze on all three national credit bureaus.

How do I know if I was affected?

BNY Mellon has sent out data breach notification letters to affected individuals. If you believe you may be impacted but have not received a notification, you can visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

1. Change Your Passwords: Immediately update your passwords for all affected accounts. Make sure the new passwords are strong and unique, not previously used on any other platform.

2. Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

3. Enable Two-Factor Authentication (2FA): Activate 2FA on all affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

4. Monitor Your Credit: Keep an eye on your credit reports and financial accounts for any suspicious activity. Report any discrepancies immediately to the appropriate financial institutions.

For more specific help and instructions related to BNY Mellon's data breach, please contact BNY Mellon's support directly.

Where can I go to learn more?

If you want to find more information on the BNY Mellon data breach, check out the following news articles:

• BNY Mellon Suffers from Data Leak

• The Bank of NY Mellon - The Largest Custodian Bank Globally - Was Just Breached, Losing Consumer Data

• Bank of NY Mellon Breach Much Bigger than First Announced