TD Bank, N.A July 2026 Data Breach Letter: What Happened and Your Legal Options

Active investigation · Free, confidential case review
Call (954) 799-5914
Active investigation Data breach · Financial

Got a data breach letter from TD Bank, N.A?

Dapeer Law, P.A. is investigating a potential class action against TD Bank, a bank whose Head of US Privacy is based in Mount Laurel, New Jersey, on behalf of customers whose personal information may have been accessed and shared by a former employee on or around July 1, 2026.

Submit your claim → See what to do No fee unless we recover for you
New Hampshire residents affected
14
New Hampshire only, per the notice letter filed with the New Hampshire Attorney General; no total disclosed
Breach window
On or around Jul 1, 2026
Former employee may have accessed and shared data
Notification delay
Not disclosed
The letter does not give a discovery date
Credit monitoring
24 months
Fraud-Defender through Merchants Information Solutions
Updates

Latest on the TD Bank, N.A data breach

  • : Dapeer Law opened its investigation following notice filings posted by the New Hampshire Attorney General.
Eligibility

Who qualifies for the TD Bank, N.A data breach investigation

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from TD Bank, N.A.
  • Your letter offered a complimentary two-year Fraud-Defender membership provided by Merchants Information Solutions.
  • You are a TD Bank customer, and your letter said a former employee may have accessed and shared your name, phone number and debit card number.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility →
Background

What happened in the TD Bank, N.A data breach

TD Bank notified the New Hampshire Attorney General of what it called a "privacy event impacting New Hampshire residents" in a letter dated 9/22/2026. The office stamped the letter received on September 28, 2026. According to the customer notice letter enclosed with that filing, TD Bank recently discovered that on or around July 1, 2026, a former employee may have accessed and shared customers' personal information. The bank states that the employee has since been terminated.

The letter states that the personal information that may have been included was name, phone number and debit card number. The New Hampshire filing lists the same categories: name, phone number and debit card number. TD Bank told the New Hampshire Attorney General that its investigation identified 14 of its customers who are residents of New Hampshire and that it had notified the affected customers in writing. The letter does not say when the bank discovered the activity.

TD Bank is offering a complimentary two-year Fraud-Defender membership provided by Merchants Information Solutions. The membership includes monitoring of the TransUnion credit file, dark web monitoring and an Identity Theft Recovery Advocate. The letter also says customers who want added protection can close their existing account(s) and open new account(s), and the bank will cover all expenses associated with this process. The bank describes the matter as an isolated incident being addressed through an internal investigation by its corporate security team. Whether the bank's controls over employee access to customer information met legal standards is among the issues being evaluated.

Top of the sample TD Bank, N.A. data breach notice letter filed with the New Hampshire Attorney General
Sample notice letter filed with the New Hampshire Attorney General. Your letter may look slightly different.
Bank breach Former employee access Debit card numbers Phone numbers New Hampshire AG filing
Action plan

What to do if you got a TD Bank, N.A data breach letter

1

Keep your notice letter

Do not discard it. Your letter contains the enrollment code for the Fraud-Defender membership and is important evidence if you decide to participate in a lawsuit.

2

Activate the free two-year Fraud-Defender membership

Activate the membership at tdbank.merchantsinfo.com with the enrollment code in your letter, before the date printed in your letter. Regularly review your account statements for unauthorized activity and report anything suspicious to the bank's fraud unit at 1-800-893-8554. Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim →
Timeline

TD Bank, N.A breach timeline

On or around Jul 1, 2026 Passed
Former employee may have accessed and shared customer information
Sep 22, 2026 Passed
Date of TD Bank's letter to the New Hampshire Attorney General
Sep 28, 2026 Passed
Letter stamped received by the New Hampshire Attorney General
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring TD Bank to implement stronger controls over employee access to customer information going forward.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

TD Bank, N.A data breach FAQ

I received a data breach letter from TD Bank, N.A. What should I do? +

Keep the letter, activate the complimentary two-year Fraud-Defender membership with the enrollment code in your letter, regularly review your account statements for unauthorized activity, consider a fraud alert or security freeze, and contact a data breach attorney for a free consultation. The letter also says TD Bank will cover all expenses if you choose to close your existing account(s) and open new account(s). Accepting the membership does not waive your right to sue.

Is the TD Bank, N.A data breach letter real or a scam? +

TD Bank, N.A has reported this incident to the New Hampshire Attorney General. Compare your letter to the official filing linked in Sources below, and use only the enrollment website and phone number printed in your letter. Be cautious of unexpected calls, texts or emails about the breach that ask for your Social Security number or account login. If you are unsure, send your letter to Dapeer Law for a free review.

Am I eligible to join a class action against TD Bank, N.A? +

If you received a letter from TD Bank saying a former employee may have accessed and shared your personal information, you may be eligible for a free case evaluation. Eligibility depends on your state of residence, the information involved, and any losses you have suffered. Dapeer Law will review your notice at no cost.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

The letter states that the personal information that may have been included was your name, phone number and debit card number. The New Hampshire filing lists the same three categories: name, phone number and debit card number. TD Bank says a former employee may have accessed and shared this information. Check your own letter for the details of your notice.

Did TD Bank, N.A offer free credit monitoring? +

Yes. The letter offers a complimentary two-year Fraud-Defender membership provided by Merchants Information Solutions. It includes continuous monitoring of your TransUnion credit file with daily alerts, dark web monitoring, and an assigned Identity Theft Recovery Advocate. Enroll at tdbank.merchantsinfo.com with the code in your letter, before the deadline printed in your letter. Enrollment is separate from, and does not waive, your right to pursue a claim.

How many people were affected by the TD Bank, N.A breach? +

TD Bank told the New Hampshire Attorney General that its investigation identified 14 customers who are residents of New Hampshire and were affected. The sources reviewed do not give a total number of affected individuals across all states. This page will be updated as more information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

TD Bank's letter to the New Hampshire Attorney General, with a sample customer notice enclosed, is posted on the New Hampshire Department of Justice website (linked in Sources below). If you received a letter but no longer have it, Dapeer Law can help you obtain a copy during your free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with TD Bank, N.A., Fraud-Defender, or any credit bureau. Prior results do not guarantee a similar outcome. Information regarding the data incident is drawn from official filings with the New Hampshire Attorney General.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Rachel Dapeer, Esq.

Rachel Dapeer is the founding partner of Dapeer Law, P.A., a consumer class action firm with offices in Florida, California, New York, New Jersey, and Illinois. With about 15 years of class action experience, she represents consumers in data breach, privacy, and consumer protection cases. She is admitted to practice in Florida, New York, New Jersey, and Illinois. Hear her hot takes on tiktok: @thatattorneyrachel

https://www.dapeer.com/rachel-dapeer
Previous
Previous

Waterford Hotel Group & LMD Holding Data Breach Letter: What Happened and Your Legal Options

Next
Next

BEP Data Breach Letter: What Happened and Your Legal Options