The Incident: Missing Backup Tapes
The tapes contained customer Social Security numbers, bank account details, and transaction histories. Despite a thorough search, they were never recovered. TD Bank asserted that there was no evidence the data had been misused, but the loss of unencrypted customer information caused significant concern about why such critical data was being transported in physical form, unencrypted, and without better safeguards.
Regulatory and Public Response
TD Bank waited months before disclosing the breach to affected customers and regulators, attracting additional scrutiny. The Vermont Attorney General's Office was among the first to announce the breach publicly. Though TD Bank escaped significant financial penalties, reputational damage was considerable. The bank offered free credit monitoring services to affected individuals as part of its remediation efforts.
Conclusion
The TD Bank case highlights the risks associated with chains of custody. By subscribing to NTERA's data destruction services, you eliminate all risks associated with the chain of custody. NTERA carries out on-site destruction of data-carrying media, witnessed by our clients, to ensure that no data devices are lost in transit.