Western Alliance Bank, a financial institution, experienced a data breach in January 2025. The breach was publicly confirmed by the bank in February 2025 and was linked to a zero-day vulnerability in the third-party Cleo file-transfer tool. The bank has notified affected customers and offered credit monitoring services.
The breach affected approximately 21,899 customers. The exposed data types include Social Security numbers (SSNs), financial account details, tax identification numbers, and passport information. The full extent of the data types compromised and the specific number of individuals affected in each state remains unclear at this time.
Details about data breaches can emerge over time, and notification processes may be delayed.