Ally Bank Under Investigation for Data Breach of Customer Usernames and Passwords

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the usernames and passwords of customers of Ally Bank, a subsidiary of Ally Financial Inc.

According to a disclosure made to the California Attorney General, a “programming code error” on Ally’s website exposed customers’ usernames and passwords to an unknown number of third parties with whom Ally has business relationships. Though Ally claims it detected the error on April 12, 2021, the bank waited approximately two months to notify impacted individuals of the breach. Moreover, the data appears to have been exposed as unencrypted, clear text, heightening the chances of its misuse.

If your personally identifiable information was breached, you may be entitled to money damages and an injunction requiring changes to Ally Bank’s security practices.

If you received notification of this data breach or are an Ally Bank customer and wish to obtain additional information about your legal rights—please complete the form below for a free legal consultation.