Dapeer Law, P.A., a top-rated class action law firm, is investigating the Bank of America data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

Bank of America Data Breach Lawsuit Investigation

Bank of America has notified regulators and at least one customer that an unauthorized party accessed the contents of a safe-deposit box on September 15, 2025, exposing highly sensitive personal information. If you received a breach letter dated October 22, 2025, you may be entitled to free identity-theft protection and potential financial compensation. Complete the form on this page or call us today to discuss your rights.

Key Takeaways

Breach date: September 15, 2025
Notice sent: October 22, 2025
Total individuals affected: 1 (Massachusetts resident)
Data exposed: name, date of birth, Social Security number, passport number & expiration date, gender, and other safe-deposit box contents
Free services offered: Two-year Experian IdentityWorks membership
Enrollment deadline: March 9, 2026

Download Official Breach Notice (PDF)

What Happened

According to Bank of America’s notice to the Massachusetts Attorney General, an incident on September 15, 2025, resulted in an unauthorized individual obtaining the contents of a customer’s safe-deposit box. The bank has since returned the property to the affected customer.

Information Exposed

Bank of America’s internal review determined that the following personal information may have been disclosed:

First and last name
Date of birth
Social Security number
Passport number and expiration date
Gender

Bank of America’s Response

The bank reports taking several actions to safeguard customers and reduce potential harm:

Completed an internal investigation into the incident
Returned the safe-deposit box contents to the owner
Implemented ongoing monitoring of the affected customer’s Bank of America accounts
Committed to covering unauthorized transactions related to the event if reported promptly
Arranged a complimentary two-year subscription to Experian IdentityWorks, which includes daily credit report monitoring, internet surveillance and identity-theft resolution assistance

Steps You Can Take

Bank of America recommends the following measures to help protect your personal and financial information:

Carefully review bank statements and credit reports over the next 12–24 months
Update contact information so the bank can reach you quickly about suspicious activity
Create strong, unique passwords and enable multifactor authentication where available
Safeguard sensitive data such as your Social Security number and PINs
Keep devices up to date with the latest security patches and antivirus software
Avoid clicking on suspicious links or responding to urgent-sounding emails or texts

Additional tips are available in the bank’s security center at bankofamerica.com/security.

Important Dates & Deadlines

October 22, 2025: Consumer notification mailed
March 9, 2026: Last day to activate complimentary Experian IdentityWorks membership

Company Overview

Bank of America Corporation is a global financial-services firm headquartered at 100 North Tryon Street, Charlotte, North Carolina, United States. Founded in 1998, the company employs approximately 213,000 people and trades on the NYSE under the ticker symbol BAC.

Key Links

Official Social Media

Frequently Asked Questions

How did the Bank of America data breach occur?

An unauthorized individual gained access to a customer’s safe-deposit box on September 15, 2025, potentially exposing sensitive documents and personal identifiers.

What data was compromised in the Bank of America breach?

Information may include your full name, date of birth, Social Security number, gender, and passport number with expiration date.

How many people were affected by the Bank of America breach?

Bank of America reported the breach to the Massachusetts Attorney General as affecting one resident.

Is Bank of America offering free credit monitoring?

Yes. Impacted customers are eligible for a two-year subscription to Experian IdentityWorks at no cost, if they enroll by March 9, 2026.

Can I sue Bank of America for the data breach?

Individuals whose personal information was compromised may have legal claims for damages. Contact us today to discuss your options.

What should I do if I see suspicious activity?

Report unauthorized transactions to Bank of America immediately and file a report with the credit bureaus and appropriate authorities.