Discover Company Cyber Security Posture

discover.com

Discoverยฎ is now part of Capital One. Together, weโ€™ll continue to deliver exceptional financial products and experiences, drive innovation, and serve customers. Find the latest updates at https://capitalonediscover.com. Discover is one of the most recognized brands in the U.S. with the Discoverยฎ card, America's cash rewards pioneer, and offers personal loans, home loans, checking and savings accounts and certificates of deposit. The Discover Global Networkยฎ is comprised of Discover Network, with millions of merchants and cash access locations; PULSEยฎ, one of the nation's leading ATM/debit networks; and Diners Club Internationalยฎ, a global payments network with acceptance around the world.

Discover Company Details

Linkedin ID:

discover-financial-services

Employees number:

21528 employees

Number of followers:

227086.0

NAICS:

52

Industry Type:

Financial Services

Homepage:

discover.com

IP Addresses:

184

Company ID:

DIS_6618111

Scan Status:

In-progress

AI scoreDiscover Risk Score (AI oriented)

Between 900 and 1000

This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

globalscoreDiscover Global Score
blurone
Ailogo

Discover Company Scoring based on AI Models

Model NameDateDescriptionCurrent Score DifferenceScore
AVERAGE-Industry03-12-2025

This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers.

N/A

Between 900 and 1000

Discover Company Cyber Security News & History

Past Incidents
25
Attack Types
1
EntityTypeSeverityImpactSeenUrl IDDetailsView
Discover Financial ServicesBreach2516/2016DIS121072425Link
Rankiteo Explanation :
Attack without any consequences

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on June 17, 2016. The breach did not involve Discover card systems, and the specific number of individuals affected and details on the types of information compromised remain unknown.

Discover Financial ServicesBreach50210/2015DIS714072525Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on October 27, 2015, with the report published on September 23, 2016. The breach involved Discover card account information, but specific details about the number of affected individuals and the method of breach are unclear.

Discover Financial ServicesBreach5028/2012DIS114072525Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach incident involving Discover Financial Services on August 17, 2012. The breach did not involve any Discover card systems and there is no evidence of unauthorized use of the account numbers; however, customers were advised that their account information may have been compromised, leading to the issuance of new cards.

Discover Financial ServicesBreach5028/2018DIS406072525Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on January 25, 2019. The breach occurred on August 13, 2018, and involved Discover card account information, although the specific types of data exposed are unknown. Affected individuals were issued new cards as a precaution against potential fraud.

Discover Financial ServicesBreach60212/2013DIS005072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach notification from Discover Financial Services on December 20, 2013. The specific date of the breach is not available, and there were 2 cards affected. The notification indicated that account information may have been compromised but did not involve any Discover card systems. The details about the compromised information and specific response actions were limited.

Discover Financial ServicesBreach50210/2014DIS014072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on October 22, 2014, and involved Discover card account information, although the specific types of information compromised are unclear. The organization responded by issuing new cards to reduce the possibility of fraud.

Discover Financial ServicesBreach5027/2017DIS323072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on June 25, 2018. The breach occurred on July 16, 2017, potentially exposing Discover card account information, though specific types of data involved are unknown. This incident highlights the vulnerability of financial institutions to cyber threats and the importance of robust security measures to protect sensitive customer information.

Discover Financial ServicesBreach5025/2014DIS547072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on October 26, 2016, which occurred on May 4, 2014. The breach potentially exposed Discover card account information, but the exact types of data compromised are unknown. A new card with a new security code and expiration date was issued as a response to the breach.

Discover Financial ServicesBreach50211/2014DIS737072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on February 20, 2017. The breach occurred on November 2, 2014, potentially exposing Discover card account information. The specific number of individuals affected is unknown.

Discover Financial ServicesBreach5028/2016DIS1018072625Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on August 10, 2016, potentially affecting Discover card account information, though the specific types of compromised information are unknown. This incident highlights the vulnerability of financial institutions to cyber threats and the importance of robust security measures to protect sensitive customer data.

Discover Financial ServicesBreach5026/2015DIS145072725Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on June 21, 2015, and reported the incident on September 23, 2016. The data involved was Discover card account information, but the specific types of data compromised are unknown. To mitigate risk, Discover is issuing new cards to affected users.

Discover Financial ServicesBreach5021/2013DIS521072725Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on January 18, 2013. The breach involved compromised Discover card account information, although no specifics on the method of breach or the number of affected individuals were provided.

Discover Financial ServicesBreach5027/2015DIS851072725Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 20, 2016. The breach occurred on July 31, 2015, and affected Discover card account information. The specific details about the number of individuals impacted and types of information compromised are unknown. This breach highlights the vulnerability of financial institutions to cyber threats and the potential for significant financial and reputational damage.

Discover Financial ServicesBreach5022/2014DIS954072725Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on March 21, 2016. The breach occurred on February 19, 2014, and affected Discover card account information, although the specific types of compromised data remain unclear.

Discover Financial ServicesBreach5029/2020DIS631072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported that Discover Financial Services experienced a data breach due to an inadvertent disclosure, affecting 690 individuals, with 2 residents specifically impacted. The breach occurred between September 29, 2020 and November 15, 2020, and was reported on December 17, 2020.

Discover Financial ServicesBreach5023/2015DIS913072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on October 26, 2016. The breach occurred on March 2, 2015, potentially affecting Discover card account information, though the specifics of the data compromised are unclear.

Discover Financial ServicesBreach5029/2016DIS822072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on September 4, 2016, and involved Discover card account information, although specific details about the data compromised are unclear.

Discover Financial ServicesBreach5028/2015DIS929072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on August 2, 2015, and the breach was reported on March 21, 2016. The breach involved Discover card account information, though specific details about the types of information compromised and the number of affected individuals are unclear.

Discover Financial ServicesBreach5024/2014DIS227072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on April 10, 2014, with the breach being reported on June 26, 2015. The breach involved the potential compromise of card account information, but no specific number of individuals affected or exact types of information compromised were provided.

Discover Financial ServicesBreach5026/2014DIS232072825Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 20, 2016. The breach occurred on June 19, 2014, potentially affecting Discover card account information, though the exact number of affected individuals is unknown. The breach did not involve Discover's systems directly and led to the issuance of new cards with updated security features.

Discover Financial ServicesBreach6027/2014DIS037072925Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach involving Discover card accounts on June 23, 2017. The breach occurred on July 1, 2014, and affected undisclosed numbers of individuals, with potential exposure of Discover card account information.

Discover Financial ServicesBreach5025/2013DIS205072925Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on May 24, 2013. The specific date of the breach is not available, and no details regarding the number of individuals affected or the types of information compromised were provided. This breach highlights the potential vulnerabilities in financial services and the importance of robust cybersecurity measures to protect sensitive information.

Discover Financial ServicesBreach5024/2017DIS257072925Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Attorney General reported on October 19, 2017, that Discover Financial Services experienced a data breach on April 27, 2017. The breach involved Discover card account information, although the specific details of the compromised data are unclear. This incident highlights the vulnerability of financial institutions to cyber threats and the potential for significant financial and reputational damage.

Discover Financial ServicesBreach5021/2016DIS818080425Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on January 2, 2016, with the breach notification reported on February 20, 2017. The breach involved Discover card account information, although the specific data compromised is unknown at this time.

Discover Financial ServicesBreach5021/2014DIS253080525Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The California Office of the Attorney General reported a data breach at Discover Financial Services on June 17, 2016. The breach, which occurred on January 1, 2014, involved Discover card account information. The specific number of individuals affected and the exact data compromised remain unknown. This incident highlights the potential risks associated with financial data breaches, where sensitive information such as account details could be exposed, leading to financial losses and reputational damage.

Discover Company Subsidiaries

SubsidiaryImage

Discoverยฎ is now part of Capital One. Together, weโ€™ll continue to deliver exceptional financial products and experiences, drive innovation, and serve customers. Find the latest updates at https://capitalonediscover.com. Discover is one of the most recognized brands in the U.S. with the Discoverยฎ card, America's cash rewards pioneer, and offers personal loans, home loans, checking and savings accounts and certificates of deposit. The Discover Global Networkยฎ is comprised of Discover Network, with millions of merchants and cash access locations; PULSEยฎ, one of the nation's leading ATM/debit networks; and Diners Club Internationalยฎ, a global payments network with acceptance around the world.

Loading...

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=discover-financial-services' -H 'apikey: YOUR_API_KEY_HERE'
newsone

Discover Cyber Security News

2025-05-28T07:00:00.000Z
Microsoft, Dutch government discover new Russian hacking group

A previously unknown team of Russian government-backed hackers is targeting critical infrastructure organizations in multiple sectors to collectย ...

2025-05-19T07:00:00.000Z
How a Master's Degree Can Pave the Way for Your Cybersecurity Career

Cybersecurity jobs are among the fastest growing, with a 33% increase in employment for information security analysts between 2023 and 2033.

2025-05-16T07:00:00.000Z
Majority of US enterprises breached in past two years despite security spend, and other cybersecurity news

Majority of US enterprises breached in past two years despite security spend, and other cybersecurity news.

2025-03-18T07:00:00.000Z
How financial institutions can minimize their attack surface

In this Help Net Security interview, Sunil Mallik, CISO of Discover Financial Services, discusses cybersecurity threats for financialย ...

2025-06-26T07:00:00.000Z
Cybersecurity experts discover first known malware to exploit AI prompt injection

Cybersecurity researchers have identified a new malware strain named โ€œSkynet,โ€ which represents the first documented attempt to exploit promptย ...

2025-06-10T07:00:00.000Z
Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

Google has stepped in to address a security flaw that could have made it possible to brute-force an account's recovery phone number.

2025-03-21T09:43:23.000Z
Cybersecurity Risk Management | Vulnerability Management

Stop cyber risks from becoming reality with cross-stack attack path modeling, threat and vulnerability management, and AI risk assessment that understands yourย ...

2025-01-19T08:00:00.000Z
5 Key OT Cybersecurity Strategies from the WEF Global Cybersecurity Outlook 2025

The recent World Economic Forum's Global Cybersecurity Outlook 2025 analyzes the escalating complexities in the cyber landscape.

2025-01-13T08:00:00.000Z
Cybersecurity researchers discover malware targeting macOS users

This malware is designed to attack browsers, cryptocurrency wallets, and user files, reflecting the rising sophistication of threats to macOSย ...

similarCompanies

Discover Similar Companies

Aegon

People are living longer, and we are excited about the possibilities this brings. We see longevity, aging, and changing life patterns as an opportunity for our customers, our employees, and society as a whole. And we want to support everyone in building the financial means to explore the possibiliti

Dubai Holding is a diversified global investment company that continues to power Dubaiโ€™s growth across 10 sectors, including Real Estate, Hospitality, Leisure & Entertainment, Media, ICT, Design, Education, Retail, Manufacturing & Logistics and Science. Since 2004, we have made strides with an eff

We are born collaborative We believe that change is only possible when everyone works together for the same purpose, after all, cooperativism is in our DNA. Besides this, we know that as important as it is to provide affordable financial solutions it is just as important to value growing together,

Cholamandalam Investment and Finance Company Limited

Cholamandalam Investment and Finance Company Limited (Chola), founded in 1978 as part of the Murugappa Group, initially focused on equipment financing. Over the years, Chola has transformed into a leading comprehensive financial services provider, offering a wide array of solutions including vehicle

Morgan Stanley

Morgan Stanley (NYSE: MS) is a leading global financial services firm providing a wide range of investment banking, securities, wealth management and investment management services. With offices in 42 countries, our firm's employees serve clients worldwide including corporations, governments, instit

Empower

Built on a foundation of trust, integrity and promise, we proudly serve over 71,000 outstanding organizations and more than 17 million individuals. ยน We take great pride in helping people with saving, investing and advice, while providing them with the tools and resources they need to help reach the

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Discover CyberSecurity History Information

How many cyber incidents has Discover faced?

Total Incidents: According to Rankiteo, Discover has faced 25 incidents in the past.

What types of cybersecurity incidents have occurred at Discover?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

How does Discover detect and respond to cybersecurity incidents?

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with issuance of new cards with updated security features and remediation measures with issuing new cards to affected users and remediation measures with issued new cards with new security codes and expiration dates and remediation measures with issuing new cards and remediation measures with issued new cards to affected individuals and remediation measures with issuance of new cards and communication strategy with advised customers of potential compromise.

Incident Details

Can you provide details on each incident?

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach involving Discover card account information on June 17, 2016. The breach occurred on January 1, 2014; however, the specific number of individuals affected is unknown, and it is unclear which specific data may have been compromised.

Date Detected: 2016-06-17

Date Publicly Disclosed: 2016-06-17

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on January 2, 2016, with the breach notification reported on February 20, 2017. The breach involved Discover card account information, although the specific data compromised is unknown at this time.

Date Detected: 2016-01-02

Date Publicly Disclosed: 2017-02-20

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Attorney General reported on October 19, 2017, that Discover Financial Services experienced a data breach on April 27, 2017. The breach involved Discover card account information, although the specific details of the compromised data are unclear.

Date Detected: 2017-04-27

Date Publicly Disclosed: 2017-10-19

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on May 24, 2013. The specific date of the breach is not available, and no details regarding the number of individuals affected or the types of information compromised were provided.

Date Publicly Disclosed: 2013-05-24

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach involving Discover card accounts on June 23, 2017. The breach occurred on July 1, 2014, and affected undisclosed numbers of individuals, with potential exposure of Discover card account information.

Date Detected: 2017-06-23

Date Publicly Disclosed: 2017-06-23

Type: Data Breach

Incident : Data Breach

Title: Data Breach Involving Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 20, 2016. The breach occurred on June 19, 2014, potentially affecting Discover card account information, though the exact number of affected individuals is unknown. The breach did not involve Discover's systems directly and led to the issuance of new cards with updated security features.

Date Detected: 2014-06-19

Date Publicly Disclosed: 2016-07-20

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on April 10, 2014, with the breach being reported on June 26, 2015. The breach involved the potential compromise of card account information, but no specific number of individuals affected or exact types of information compromised were provided.

Date Detected: 2014-04-10

Date Publicly Disclosed: 2015-06-26

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on August 2, 2015, and the breach was reported on March 21, 2016. The breach involved Discover card account information, though specific details about the types of information compromised and the number of affected individuals are unclear.

Date Detected: 2015-08-02

Date Publicly Disclosed: 2016-03-21

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on September 4, 2016, and involved Discover card account information, although specific details about the data compromised are unclear.

Date Detected: 2017-07-21

Date Publicly Disclosed: 2017-07-21

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on October 26, 2016. The breach occurred on March 2, 2015, potentially affecting Discover card account information, though the specifics of the data compromised are unclear.

Date Detected: 2016-10-26

Date Publicly Disclosed: 2016-10-26

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The Maine Office of the Attorney General reported that Discover Financial Services experienced a data breach due to an inadvertent disclosure, affecting 690 individuals, with 2 residents specifically impacted.

Date Publicly Disclosed: 2020-12-17

Type: Data Breach

Attack Vector: Inadvertent Disclosure

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on March 21, 2016. The breach occurred on February 19, 2014, and affected Discover card account information, although the specific types of compromised data remain unclear.

Date Detected: 2016-03-21

Date Publicly Disclosed: 2016-03-21

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 20, 2016. The breach occurred on July 31, 2015, and affected Discover card account information, although specific details about the number of individuals impacted and types of information compromised are unknown.

Date Detected: 2016-07-20

Date Publicly Disclosed: 2016-07-20

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on January 18, 2013. The breach involved compromised Discover card account information, although no specifics on the method of breach or the number of affected individuals were provided.

Date Detected: 2013-01-18

Date Publicly Disclosed: 2013-01-18

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on June 21, 2015, and reported the incident on September 23, 2016. The data involved was Discover card account information, but the specific types of data compromised are unknown. To mitigate risk, Discover is issuing new cards to affected users.

Date Detected: 2015-06-21

Date Publicly Disclosed: 2016-09-23

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on August 10, 2016, potentially affecting Discover card account information, though the specific types of compromised information are unknown.

Date Detected: 2017-07-21

Date Publicly Disclosed: 2017-07-21

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on February 20, 2017. The breach occurred on November 2, 2014, potentially exposing Discover card account information. The specific number of individuals affected is unknown.

Date Detected: 2017-02-20

Date Publicly Disclosed: 2017-02-20

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on October 26, 2016, which occurred on May 4, 2014. The breach potentially exposed Discover card account information, but the exact types of data compromised are unknown. A new card with a new security code and expiration date was issued as a response to the breach.

Date Detected: 2016-10-26

Date Publicly Disclosed: 2016-10-26

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on June 25, 2018. The breach occurred on July 16, 2017, potentially exposing Discover card account information, though specific types of data involved are unknown.

Date Detected: 2018-06-25

Date Publicly Disclosed: 2018-06-25

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on July 21, 2017. The breach occurred on October 22, 2014, and involved Discover card account information, although the specific types of information compromised are unclear. The organization responded by issuing new cards to reduce the possibility of fraud.

Date Detected: 2017-07-21

Date Publicly Disclosed: 2017-07-21

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach notification from Discover Financial Services on December 20, 2013. The specific date of the breach is not available, and there were 2 cards affected. The notification indicated that account information may have been compromised but did not involve any Discover card systems. The details about the compromised information and specific response actions were limited.

Date Publicly Disclosed: 2013-12-20

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on January 25, 2019. The breach occurred on August 13, 2018, and involved Discover card account information, although the specific types of data exposed are unknown. Affected individuals were issued new cards as a precaution against potential fraud.

Date Detected: 2019-01-25

Date Publicly Disclosed: 2019-01-25

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach incident involving Discover Financial Services on August 17, 2012. The breach did not involve any Discover card systems and there is no evidence of unauthorized use of the account numbers; however, customers were advised that their account information may have been compromised, leading to the issuance of new cards.

Date Detected: 2012-08-17

Date Publicly Disclosed: 2012-08-17

Type: Data Breach

Incident : Data Breach

Title: Discover Financial Services Data Breach

Description: The California Office of the Attorney General reported that Discover Financial Services experienced a data breach on October 27, 2015, with the report published on September 23, 2016. The breach involved Discover card account information, but specific details about the number of affected individuals and the method of breach are unclear.

Date Detected: 2015-10-27

Date Publicly Disclosed: 2016-09-23

Type: Data Breach

Incident : Data Breach

Title: Data Breach at Discover Financial Services

Description: The California Office of the Attorney General reported a data breach involving Discover Financial Services on June 17, 2016. The breach did not involve Discover card systems, and the specific number of individuals affected and details on the types of information compromised remain unknown.

Date Publicly Disclosed: 2016-06-17

Type: Data Breach

What are the most common types of attacks the company has faced?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident?

Incident : Data Breach DIS818080425

Data Compromised: Discover card account information

Incident : Data Breach DIS257072925

Data Compromised: Discover card account information

Incident : Data Breach DIS037072925

Data Compromised: Discover card account information

Incident : Data Breach DIS232072825

Data Compromised: Discover card account information

Incident : Data Breach DIS227072825

Data Compromised: card account information

Incident : Data Breach DIS929072825

Data Compromised: Discover card account information

Incident : Data Breach DIS822072825

Data Compromised: Discover card account information

Incident : Data Breach DIS913072825

Data Compromised: Discover card account information

Incident : Data Breach DIS954072725

Data Compromised: Discover card account information

Incident : Data Breach DIS851072725

Data Compromised: Discover card account information

Incident : Data Breach DIS521072725

Data Compromised: Discover card account information

Incident : Data Breach DIS145072725

Data Compromised: Discover card account information

Incident : Data Breach DIS1018072625

Data Compromised: Discover card account information

Incident : Data Breach DIS737072625

Data Compromised: Discover card account information

Incident : Data Breach DIS547072625

Data Compromised: Discover card account information

Incident : Data Breach DIS323072625

Data Compromised: Discover card account information

Incident : Data Breach DIS014072625

Data Compromised: Discover card account information

Incident : Data Breach DIS005072625

Data Compromised: Account Information

Incident : Data Breach DIS406072525

Data Compromised: Discover card account information

Incident : Data Breach DIS114072525

Data Compromised: Account Information

Incident : Data Breach DIS714072525

Data Compromised: Discover card account information

What types of data are most commonly compromised in incidents?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Discover card account information, Discover card account information, Discover card account information, Discover card account information, card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Account Information, Discover card account information, Account Information and Discover card account information.

Which entities were affected by each incident?

Incident : Data Breach DIS253080525

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS818080425

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS257072925

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS205072925

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS037072925

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS232072825

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS227072825

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS929072825

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS822072825

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS913072825

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS631072825

Entity Type: Financial Services

Industry: Finance

Customers Affected: 690

Incident : Data Breach DIS954072725

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS851072725

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS521072725

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS145072725

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS1018072625

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS737072625

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS547072625

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS323072625

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS014072625

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS005072625

Entity Type: Financial Services

Industry: Finance

Customers Affected: 2

Incident : Data Breach DIS406072525

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS114072525

Entity Type: Financial Services

Industry: Finance

Location: California

Incident : Data Breach DIS714072525

Entity Type: Financial Services

Industry: Finance

Incident : Data Breach DIS121072425

Entity Type: Financial Services

Industry: Finance

Response to the Incidents

What measures were taken in response to each incident?

Incident : Data Breach DIS232072825

Remediation Measures: Issuance of new cards with updated security features

Incident : Data Breach DIS145072725

Remediation Measures: Issuing new cards to affected users

Incident : Data Breach DIS547072625

Remediation Measures: Issued new cards with new security codes and expiration dates

Incident : Data Breach DIS014072625

Remediation Measures: Issuing new cards

Incident : Data Breach DIS406072525

Remediation Measures: Issued new cards to affected individuals

Incident : Data Breach DIS114072525

Remediation Measures: Issuance of new cards

Communication Strategy: Advised customers of potential compromise

Data Breach Information

What type of data was compromised in each breach?

Incident : Data Breach DIS818080425

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS257072925

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS037072925

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS232072825

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS227072825

Type of Data Compromised: card account information

Incident : Data Breach DIS929072825

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS822072825

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS913072825

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS631072825

Number of Records Exposed: 690

Incident : Data Breach DIS954072725

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS851072725

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS521072725

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS145072725

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS1018072625

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS737072625

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS547072625

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS323072625

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS014072625

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS005072625

Type of Data Compromised: Account Information

Number of Records Exposed: 2

Incident : Data Breach DIS406072525

Type of Data Compromised: Discover card account information

Incident : Data Breach DIS114072525

Type of Data Compromised: Account Information

Incident : Data Breach DIS714072525

Type of Data Compromised: Discover card account information

What measures does the company take to prevent data exfiltration?

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Issuance of new cards with updated security features, Issuing new cards to affected users, Issued new cards with new security codes and expiration dates, Issuing new cards, Issued new cards to affected individuals, Issuance of new cards.

References

Where can I find more information about each incident?

Incident : Data Breach DIS253080525

Source: California Office of the Attorney General

Incident : Data Breach DIS818080425

Source: California Office of the Attorney General

Incident : Data Breach DIS257072925

Source: California Attorney General

Date Accessed: 2017-10-19

Incident : Data Breach DIS205072925

Source: California Office of the Attorney General

Date Accessed: 2013-05-24

Incident : Data Breach DIS037072925

Source: California Office of the Attorney General

Incident : Data Breach DIS232072825

Source: California Office of the Attorney General

Incident : Data Breach DIS227072825

Source: California Office of the Attorney General

Incident : Data Breach DIS929072825

Source: California Office of the Attorney General

Incident : Data Breach DIS822072825

Source: California Attorney General

Date Accessed: 2017-07-21

Incident : Data Breach DIS913072825

Source: California Office of the Attorney General

Date Accessed: 2016-10-26

Incident : Data Breach DIS631072825

Source: Maine Office of the Attorney General

Incident : Data Breach DIS954072725

Source: California Office of the Attorney General

Date Accessed: 2016-03-21

Incident : Data Breach DIS851072725

Source: California Office of the Attorney General

Date Accessed: 2016-07-20

Incident : Data Breach DIS521072725

Source: California Office of the Attorney General

Date Accessed: 2013-01-18

Incident : Data Breach DIS145072725

Source: California Office of the Attorney General

Incident : Data Breach DIS1018072625

Source: California Office of the Attorney General

Date Accessed: 2017-07-21

Incident : Data Breach DIS737072625

Source: California Office of the Attorney General

Date Accessed: 2017-02-20

Incident : Data Breach DIS547072625

Source: California Office of the Attorney General

Date Accessed: 2016-10-26

Incident : Data Breach DIS323072625

Source: California Office of the Attorney General

Date Accessed: 2018-06-25

Incident : Data Breach DIS014072625

Source: California Office of the Attorney General

Date Accessed: 2017-07-21

Incident : Data Breach DIS005072625

Source: California Office of the Attorney General

Date Accessed: 2013-12-20

Incident : Data Breach DIS406072525

Source: California Office of the Attorney General

Date Accessed: 2019-01-25

Incident : Data Breach DIS114072525

Source: California Office of the Attorney General

Date Accessed: 2012-08-17

Incident : Data Breach DIS714072525

Source: California Office of the Attorney General

Date Accessed: 2016-09-23

Incident : Data Breach DIS121072425

Source: California Office of the Attorney General

Where can stakeholders find additional resources on cybersecurity best practices?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General, and Source: California Office of the Attorney General, and Source: California Attorney GeneralDate Accessed: 2017-10-19, and Source: California Office of the Attorney GeneralDate Accessed: 2013-05-24, and Source: California Office of the Attorney General, and Source: California Office of the Attorney General, and Source: California Office of the Attorney General, and Source: California Office of the Attorney General, and Source: California Attorney GeneralDate Accessed: 2017-07-21, and Source: California Office of the Attorney GeneralDate Accessed: 2016-10-26, and Source: Maine Office of the Attorney General, and Source: California Office of the Attorney GeneralDate Accessed: 2016-03-21, and Source: California Office of the Attorney GeneralDate Accessed: 2016-07-20, and Source: California Office of the Attorney GeneralDate Accessed: 2013-01-18, and Source: California Office of the Attorney General, and Source: California Office of the Attorney GeneralDate Accessed: 2017-07-21, and Source: California Office of the Attorney GeneralDate Accessed: 2017-02-20, and Source: California Office of the Attorney GeneralDate Accessed: 2016-10-26, and Source: California Office of the Attorney GeneralDate Accessed: 2018-06-25, and Source: California Office of the Attorney GeneralDate Accessed: 2017-07-21, and Source: California Office of the Attorney GeneralDate Accessed: 2013-12-20, and Source: California Office of the Attorney GeneralDate Accessed: 2019-01-25, and Source: California Office of the Attorney GeneralDate Accessed: 2012-08-17, and Source: California Office of the Attorney GeneralDate Accessed: 2016-09-23, and Source: California Office of the Attorney General.

Investigation Status

How does the company communicate the status of incident investigations to stakeholders?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through was Advised customers of potential compromise.

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident?

Incident : Data Breach DIS114072525

Customer Advisories: Advised customers of potential compromise

What advisories does the company provide to stakeholders and customers following an incident?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Advised customers of potential compromise.

Additional Questions

Incident Details

What was the most recent incident detected?

Most Recent Incident Detected: The most recent incident detected was on 2016-06-17.

What was the most recent incident publicly disclosed?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2016-06-17.

Impact of the Incidents

What was the most significant data compromised in an incident?

Most Significant Data Compromised: The most significant data compromised in an incident were Discover card account information, Discover card account information, Discover card account information, Discover card account information, card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Account Information, Discover card account information, Account Information and Discover card account information.

Data Breach Information

What was the most sensitive data compromised in a breach?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Discover card account information, Discover card account information, Discover card account information, Discover card account information, card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Discover card account information, Account Information, Discover card account information, Account Information and Discover card account information.

What was the number of records exposed in the most significant breach?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 692.0.

References

What is the most recent source of information about an incident?

Most Recent Source: The most recent source of information about an incident are California Office of the Attorney General, California Office of the Attorney General, California Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Attorney General, California Office of the Attorney General, Maine Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General, California Office of the Attorney General and California Office of the Attorney General.

Stakeholder and Customer Advisories

What was the most recent customer advisory issued?

Most Recent Customer Advisory: The most recent customer advisory issued was an Advised customers of potential compromise.

What Do We Measure?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge