1. [News](/news) 2. TD data leak exposes Social Security numbers and personal details # TD data leak exposes Social Security numbers and personal details A data leak involving TD was reported in April 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team April 17, 2026 Table of Contents * [What happened in the TD data leak?](#what-happened-in-the-td-data-leak) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for TD customers](#impact-and-risks-for-td-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: TD data leak * Date occurred February 12, 2026 * Date reported February 12, 2026 * Target entity TD * Source of breach Internal address error * Data types Names, addresses, dates of birth, Social Security numbers * Status Confirmed; reported on February 12, 2026. * Severity Medium; the exposure of Social Security numbers and dates of birth significantly increases the risk of identity theft and financial fraud for affected customers. ## What happened in the TD data leak? TD (td.com) disclosed a data breach incident on April 16, 2026. The incident was not the result of a malicious external attack by a threat actor but originated from an internal administrative error within the organization. According to the report, the breach occurred on February 12, 2026, when personal information including names, addresses, dates of birth, and Social Security numbers was compromised due to an address error. The severity of this incident is classified as medium because the exposed data categories are highly sensitive and can be exploited for financial crimes. TD is currently conducting an internal investigation and implementing measures to enhance its data protection protocols. Such incidents typically lead to heightened risks of identity theft and unauthorized account access for those affected. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for TD customers The exposure of Social Security numbers and dates of birth poses a significant risk to TD customers. This sensitive information can be used by malicious actors to perform identity theft, open fraudulent credit accounts, or intercept government benefits. Furthermore, the combination of names and physical addresses could be utilized in targeted phishing campaigns or physical mail fraud schemes designed to extract further credentials from unsuspecting victims. Financial institutions often face regulatory scrutiny and a loss of consumer trust following data exposure events. Affected individuals should immediately monitor their financial statements and consider placing a freeze on their credit files to prevent unauthorized activity. Maintaining transparency and providing clear communication to customers is a critical step in mitigating the long-term impact of such security lapses. ## How to protect against similar security incidents In light of the TD data breach involving Social Security numbers and personal identifiers, affected individuals should take immediate steps to secure their financial identities. * **Enroll in credit monitoring services.** Sign up for a credit monitoring service to receive alerts about any new accounts or inquiries made in your name. This provides an early warning system for potential identity theft resulting from the exposed Social Security numbers. Check if TD is providing complimentary monitoring services to affected customers. * **Place a security freeze on credit reports.** Contact the major credit bureaus to place a freeze on your credit files. This prevents lenders from accessing your credit report, making it nearly impossible for identity thieves to open new accounts. You can unfreeze your report temporarily if you need to apply for credit yourself. * **Monitor financial accounts for unauthorized activity.** Regularly review your bank and credit card statements for any transactions you do not recognize. Set up automated transaction alerts to be notified of any withdrawals or purchases in real-time. Immediately report any suspicious activity to your financial institution’s fraud department. * **Implement continuous attack surface management.** Organizations should deploy automated tools to identify and remediate misconfigurations that lead to data loss. Regularly audit internal data handling and mailing processes to ensure sensitive PII is not exposed through administrative errors. Maintain a comprehensive inventory of where sensitive customer data is stored and how it is transmitted. > Proactive identity protection and vigilant account monitoring are the most effective ways to mitigate the risks associated with the exposure of sensitive personal data. ## Frequently asked questions ### What happened in the TD security incident? On April 16, 2026, TD (td.com) disclosed a security breach. According to initial reports, personal information including names, addresses, dates of birth, and Social Security numbers was compromised due to an internal address error. ### When did the TD data leak occur? The TD leakwas publicly reported on April 16, 2026. The exact date of the attack has not been disclosed. ### What data was exposed? The incident exposed sensitive personal information, including names, physical addresses, dates of birth, and Social Security numbers. ### Is my personal information at risk? If you interacted with TD, there’s a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts. ### What steps should companies take after being breached? TD is expected to secure its systems, notify affected parties, and provide guidance on protective actions. The company is likely reviewing its security measures and deploying attack surface management to prevent future occurrences. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.