TD Bank Data Breach Linked to Insider Threat

TD BANK INSIDER THREAT INCIDENT

In late February 2025, TD Bank alerted customers to a significant data breach. What made this incident particularly alarming was the vector: it was entirely an insider threat.

An unauthorized former employee managed to bypass internal access controls to exfiltrate sensitive customer financial data. This incident served as a wake-up call for the financial industry, highlighting that perimeter defenses are useless if internal access protocols, specifically offboarding and privilege revocation, are not strictly enforced.