--- title: "American Bankers Association Discloses Data Breach" id: "30551" type: "post" slug: "american-bankers-association-discloses-data-breach" published_at: "2015-10-05T20:58:46+00:00" modified_at: "2026-11-09T17:50:43+00:00" url: "https://associationsnow.com/2015/10/05/american-bankers-association-discloses-data-breach/" markdown_url: "https://associationsnow.com/2015/10/05/american-bankers-association-discloses-data-breach.md" excerpt: "Right as National Cybersecurity Awareness Month began, the American Bankers Association (ABA) announced it had been hit by a malicious intrusion that targeted member online purchases and event transactions." taxonomy_category: - "Ethics" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "Data Breach" - "financial security" - "Technology" taxonomy_content_format: - "Article" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » American Bankers Association Discloses Data Breach Data breaches can happen to anyone — even the organizations that lobby Congress for stronger cybersecurity legislation. On October 1 — which happened to coincide with the first day of [National Cybersecurity Awareness Month (opens in a new tab)](https://www.staysafeonline.org/ncsam/) — the American Bankers Association [announced that (opens in a new tab)](http://www.aba.com/About/Pages/Alert.aspx) “at least 6,400 records composed of ABA Shopping Cart usernames and passwords were posted online.” The breach, while [smaller than other recent attacks (opens in a new tab)](http://www.nytimes.com/aponline/2015/10/01/business/ap-us-experian-t-mobile-data-breach.html) , is significant because of the association’s close ties with the financial industry. Are the hackers simply looking for credit card numbers, or is this part of a larger strategy to learn more about the banks and their employees? > Why was the ABA a hacking target? And what’s it mean for banks?[http://t.co/oszqAsma69 (opens in a new tab)](http://t.co/oszqAsma69) > [@JoeAdlerDC (opens in a new tab)](https://twitter.com/JoeAdlerDC?ref_src=twsrc%5Etfw) > [@IanMcKendry13 (opens in a new tab)](https://twitter.com/IanMcKendry13?ref_src=twsrc%5Etfw) > [pic.twitter.com/rcc8lp3YKO (opens in a new tab)](http://t.co/rcc8lp3YKO) > > — American Banker (@AmerBanker) [October 2, 2015 (opens in a new tab)](https://twitter.com/AmerBanker/status/650047148495605760?ref_src=twsrc%5Etfw) That question has the staff at *[American Banker (opens in a new tab)](http://www.americanbanker.com/news/law-regulation/why-the-aba-got-hacked-and-what-it-means-for-banks-1077067-1.html)* talking: - Some experts said the hacking of a trade association website, where users enter personal details to sign up for events or order publications, should raise alarms about perpetrators potentially wanting access to credentials an employee might use at a member institution. - “It helps whoever has that data potentially to learn more about the bank that that individual is tied to,” Mercedes Tunstall, a partner at Pillsbury Winthrop Shaw Pittman LLP, said. [An FAQ from ABA (opens in a new tab)](http://www.aba.com/About/Pages/Alert.aspx) says they “have seen no evidence that the hacker has also accessed credit card or other personal financial information.” That bodes well for the outcome of this breach, and ABA says it is already working with a security firm to identify the source of the attack. ### Cybersecurity Awareness Month Just Got Real While ABA would surely rather run a cybersecurity drill than deal with a real breach, there are some important lessons to be learned from the experience. The group has been lobbying Congress for years for stricter security standards. Now, it’s heeding its own advice. Here are a few suggestions, [courtesy of ABA (opens in a new tab)](http://www.aba.com/Consumers/Pages/DataBreachConsumerTips.aspx) , to [keep your members safe (opens in a new tab)](http://www.aba.com/Tools/Function/Cyber/Pages/Cyber-ProtectingCustomers.aspx) . - **Encourage members to use a unique password to access your site.** If, for example, members use the same password to access your site, their email, and their bank, a hacker just needs one password to access all three. Password managers like [1Password (opens in a new tab)](https://agilebits.com/onepassword) and [LastPass (opens in a new tab)](https://lastpass.com/) make it easy to generate and manage unique passwords for every login. - **Consider two-factor authentication for your membership site.** Adding a second form of authentication in the form of a PIN or fingerprint is one of the easiest ways to improve security. Without two-factor authentication, hackers can “[daisy chain (opens in a new tab)](http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/) ” accounts to gain access to the ones they’re interested in. - **Ask members to run credit reports three times per year.** Each of the three major credit reporting agencies — TransUnion, Equifax and Experian — offer one free credit report per year. Ask your members to take advantage of one every four months to be aware of any security issues. The biggest takeaway from the ABA breach? Every organization needs to act like a security organization these days. It’s your responsibility to keep your members educated and secure. (omada/ThinkStock) [Jimmy Daly](https://associationsnow.com/author/jimmy-daly/) Jimmy is a writer, editor and outdoorsman. He also publishes a weekly newsletter with inspiration and insight for creatives. [More articles by this author](https://associationsnow.com/author/jimmy-daly/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#Data Breach](https://associationsnow.com/tag/data-breach/) [#financial security](https://associationsnow.com/tag/financial-security/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [TemplateMembers onlyMember Onboarding ToolkitNovember 5, 2026](https://associationsnow.com/2026/11/05/member-onboarding-toolkit/) - [VideoThe Career Moves Every Association Leader Needs Right NowSeptember 24, 2026](https://associationsnow.com/2026/09/24/the-career-moves-every-association-leader-needs-right-now/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2015%2F10%2F05%2Famerican-bankers-association-discloses-data-breach%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !