Affected Customer

If the bank, based upon its investigation, can determine from its logs or other data precisely which customers’ information has been improperly accessed, it may limit notification to those customers with regard to whom the bank determines that misuse of their information has occurred or is reasonably possible. However, there may be situations where the bank determines that a group of files has been accessed improperly, but is unable to identify which specific customers’ information has been accessed. If the circumstances of the unauthorized access lead the bank to determine that misuse of the information is reasonably possible, it should notify all customers in the group.

Locations: