Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: Bank of America
  • Street Address: 100 N Tryon St.
  • City: Charlotte
  • State, or Country if outside the US: NC
  • Zip Code: 28202

Submitted By

  • Name: Bennie Barker III
  • Title: SVP, Sr. Data Architect
  • Firm name (if different than entity):
  • Telephone Number: 980-301-3647
  • Email Address:
  • Relationship to entity whose information was compromised: Associate

Breach Information

  • Total number of persons affected (including residents): 1883
  • Total number of Maine residents affected: 15
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 04/16/2024
  • Date Breach Discovered: 04/22/2024
  • Description of the Breach:
    • Inadvertent disclosure, Other
    • If other, please specify: We are notifying you on behalf of Walmart 401(k) Retirement Plan. As recordkeeper, Merrill provides services for the Walmart 401(k) Plan. On April 16, 2024, a Merrill employee inadvertently disclosed personal information to an unauthorized recipient via an isolated email error. We became aware of this event on April 22, 2024. The personal information included in the email was the first and last name and Social Security number. The email has been confirmed deleted. We are not aware of any misuse of the personal information disclosed. Merrill will notify the impacted individuals on May 23, 2024. Additionally, Merrill is providing complimentary two-year membership in an identity theft protection service eligible for affected individuals. Information about these services is contained in the notification letter to the affected individuals.
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 05/23/2024
  • Copy of notice to affected Maine residents: Client Letter 2024 2879 May 23 2024.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Experian Credit Monitoring for 24 months.