Consumer complaint received 2025-07-17 00:00:00
Product: Checking or savings account — Other banking product or service
Issue: Managing an account — Problem accessing account
Company: BANK OF AMERICA, NATIONAL ASSOCIATION
State: CA

Complaint narrative:
TO : Consumer Financial Protection Bureau RE : XXXX XXXX XXXX Bank of America for Unauthorized Account Access and Data Breach Related To Complaint XXXX I am submitting a formal complaint against Bank of America concerning unauthorized access and alteration of my personal banking information. This breach directly implicates XXXX  XXXX XXXX failure to secure my account and prevent unauthorized third-party access, specifically involving an email address belonging to XXXX XXXX ( XXXX ) being added without my knowledge, consent, or authorization. 
On XX/XX/XXXX, I discovered this unauthorized secondary email was added to my Bank of America account on XX/XX/XXXX. I have never authorized XXXX XXXX or any representative to access, modify, or receive communications related to my account. Bank of America failed to provide any explanation, justification, or remedial action beyond instructing me to delete the unauthorized email after I reported it. 
Despite my prompt reporting, Bank of America demonstrated gross negligence by allowing this breach to persist undetected for nearly XXXX months. This incident reveals serious systemic failures in their data security protocols, customer account protections, and internal monitoring systems. 
LEGAL VIOLATIONS : XXXX  XXXX XXXX conduct constitutes multiple statutory violations including but not limited to : XXXX. Violation of the XXXX XXXX XXXX XXXX ( 12 U.S.C. 5531, 5536 ) for unfair, deceptive, or abusive acts or practices allowing unauthorized access. 
XXXX. Violation of the XXXX XXXX ( XXXX XXXX. XXXX XXXX XXXX ) for failure to implement adequate safeguards to protect consumer financial data. 
XXXX. Negligence in cybersecurity governance resulting in unauthorized access and potential harm to consumer privacy and financial security. 
XXXX. Breach of fiduciary duty to maintain the confidentiality and integrity of customer information. 
BACKGROUND AND CONTEXT : I re-enrolled in XXXX  XXXX XXXX online banking in XXXX after the bank accidentally disenrolled me. At no point during this process or afterward did I authorize or consent to the addition of any third-party email address. This unauthorized change was discovered only after I received a suspicious email today XX/XX/XXXX purportedly from Bank of America and verified my account information directly. Per the customer service rep she confirmed no emails had been sent from their department today. 
XXXX  XXXX XXXX failure to detect or prevent this unauthorized access, and its inability to provide any meaningful explanation or internal investigation, constitutes a fundamental breach of trust and security obligations owed to me as a customer. 
This matter is urgent and demands the full investigative authority of the CFPB. I stand ready to provide all supporting documentation, including screenshots, correspondence, and detailed statements. 
PRIOR HISTORY OF MALFEASANCE : XXXX XXXX XXXX XXXX has a well-documented history of consumer fraud, professional misconduct, and regulatory scrutiny. XXXX, XXXX, and various forums host consumer complaints alleging financial harm, unauthorized legal representation, and identity tampering. XXXX consumer explicitly claimed that XXXX unlawfully accessed their Bank of America account, mirroring the exact pattern in my complaint. Additionally, the XXXX  Supreme Court has imposed disciplinary sanctions against principals at this firm for violations of legal ethics and client abandonment. 
I am therefore requesting that the Consumer Financial Protection Bureau initiate a formal investigation into the following : XXXX. How someone associated with this email XXXX was inserted into my private Bank of America profile without my knowledge or consent. 
XXXX. Whether XXXX XXXX or any of its agents engaged in data manipulation, identity fraud, or unauthorized surveillance of consumer accounts. 
XXXX. Whether any breach or internal negligence at Bank of America enabled this infiltration. 
XXXX. Whether this incident correlates with other complaints submitted to federal or state agencies concerning XXXX XXXX conduct and access to consumer financial data. 
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation