Wells Fargo data breach history (2016-2026): insider access, staff leaks and a 2017 legal-discovery mistake
Wells Fargo’s data incidents since 2016 have come from people with legitimate access: a former employee, a staffer emailing data to himself, and outside lawyers who handed over client files in a court case. This page dates each one and shows what is confirmed.
Short answer
Was Wells Fargo hacked?
We found no confirmed hack of Wells Fargo’s own systems from 2016 to 2026 in the sources we read. Its notified incidents involve insiders. In September 2024 it told customers, in a notice filed with Vermont’s Attorney General, that a former employee had accessed their confidential information between May 2022 and March 2023; a class action followed. In April 2024 Wells Fargo said “Wells Fargo was not involved in a cyber-attack” and that an employee had sent information to a personal account, affecting two customers.
In July 2017 the New York Times reported that Wells Fargo’s outside counsel, through a vendor error, sent about 1.4 GB of files on at least 50,000 wealth clients, including Social Security numbers, to a former employee’s lawyer in a lawsuit. Wells Fargo customers were also named in an October 2024 update to the Infosys McCamish vendor breach (via search).
Timeline at a glance
Oct 2024Class action filed over the former-employee access incident. (Teiss)Reported
21 Oct 2024Infosys McCamish updates its Maine AG notice to add Wells Fargo (via search). (JD Supra (via search))Reported
Sep 2024Vermont AG notice: a former employee accessed customer data May 2022 – Mar 2023. (Teiss)Confirmed
Apr 2024Wells Fargo: an employee sent customer information to a personal account; not a cyberattack. (Audacy)Confirmed
21-22 Jul 2017NYT: outside counsel’s vendor error sends files on ~50,000 wealth clients to an opposing lawyer. (Engadget / NYT)Reported
Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Wells Fargo incident timeline, in detail
Confirmed = acknowledged by Wells Fargo, a regulator filing or a court. Reported = credible reporting Wells Fargo has not fully confirmed. Unverified claim = an attacker or leak-site claim.
May 2022 – Oct 2024ConfirmedInsider
Former employee accessed customer data; notice in September 2024, class action in October
What happened. Wells Fargo found in July 2024 that a former employee had accessed confidential customer information between May 2022 and March 2023, Teiss reported, and in some cases misused it for fraud. It notified customers by a September 2024 letter filed with the Vermont Attorney General. Separately, Wells Fargo Clearing Services (First Clearing) filed a notice with the Massachusetts AG and began mailing letters on 19 September 2024.
Impact. Per the class complaint reported by Teiss: names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, and driver’s licence, bank, brokerage and credit card details. The Clearing Services notice listed names, SSNs and brokerage account numbers. The suit alleges a nearly three-month delay in notice. Wells Fargo said it offered identity theft protection and was improving security protocols. No count was published.
What happened. Search results show that on 21 October 2024 Infosys McCamish Systems updated its Maine AG notice for its late-2023 breach to add Wells Fargo among the entities whose customers were affected. We could not open the notice or the JD Supra summary (via search).
Impact. No Wells Fargo-specific count was found. The same breach exposed 57,028 Bank of America customers.
Employee sends customer information to a personal account
What happened. After reports of a cyberattack, Wells Fargo told Audacy: “Wells Fargo was not involved in a cyber-attack.” It said an employee violated policy by sending information to a personal account and was no longer with the bank.
Impact. Two customers received breach notification letters, per Audacy.
Jul 2017ReportedThird-party / law firm and e-discovery vendor
Outside counsel’s vendor error hands client files to an opposing lawyer
What happened. The New York Times reported, and Engadget summarised, that Wells Fargo’s outside lawyer sent a CD of about 1.4 GB of files to a former Wells Fargo adviser who had subpoenaed the bank. The lawyer said an outside vendor was supposed to screen the documents. Wells Fargo asked for the files back.
Impact. At least 50,000 clients, reportedly among the bank’s wealthiest: names, Social Security numbers and financial details. It was not a hack.
Two September 2024 notices: Teiss reported a Wells Fargo notice in Vermont (former employee) and a Wells Fargo Clearing Services notice in Massachusetts. The sources do not say whether they are the same incident.
The 2017 count: reports say “as many as” or “at least” 50,000 clients. The figure comes from the New York Times; Wells Fargo did not publish one in the sources we read.
The pattern across the record
Insiders, not intruders
Each confirmed incident involved someone with legitimate access: a former employee, a staffer emailing himself, or lawyers in discovery. Monitoring of what staff look up is the control that matters.
Slow detection
The former employee’s access ran for about ten months and was found more than a year after it ended.
What it means for Wells Fargo For Wells Fargo and Wells Fargo Advisors customers — and what to do
If a Wells Fargo letter reached you, the data probably included your SSN and account details.
1.Freeze your credit
A freeze with the three US bureaus is free and stops new accounts in your name.
We found no confirmed hack of Wells Fargo’s own systems from 2016 to 2026. Its notified incidents were insider access by a former employee (2022-23), an employee emailing data to a personal account (2024), and a 2017 legal-discovery error by outside counsel.
Wells Fargo data breach 2024: what happened?+
In September 2024 Wells Fargo notified customers that a former employee had accessed their information between May 2022 and March 2023, and in some cases misused it for fraud. Separately, in April 2024 it said an employee sent information to a personal account, affecting two customers.
Is there a Wells Fargo data breach lawsuit?+
Yes. A class action was filed in October 2024 in the Northern District of California over the former-employee incident, alleging a delay of nearly three months in notifying customers. We found no settlement in the sources we read.
What was the 2017 Wells Fargo data leak?+
The New York Times reported that Wells Fargo’s outside lawyer, through a vendor error, sent files on at least 50,000 wealth clients, including SSNs, to a former employee’s lawyer during a lawsuit. It was not a hack.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Wells Fargo. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.