Short answer: U.S. Bank reportedly told some people that a technical configuration error during the week of April 8, 2025 may have allowed a fraudulent actor to view personal information. The reported categories include account numbers, names, street addresses, telephone numbers and email addresses. Public reporting does not establish a nationwide victim count, that passwords or Social Security numbers were involved, or that money was stolen.
What happened
According to Cybernews reporting based on a customer notification, a technical configuration error created an opportunity for an unauthorized or fraudulent party to access or view certain customer information during the week of April 8, 2025.
This is best described as a configuration-related data exposure or security incident. The available information does not describe a ransomware event, a confirmed intrusion into every online-banking account, or proof that the actor downloaded, sold or broadly distributed the data.
If you received a notice, treat that letter as the authority for your individual situation. It may identify data elements or remediation that are not included in public reporting.
#1 Best Overall
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
What information may have been exposed
| Reported category | What it could mean |
|---|---|
| Account numbers | Contact U.S. Bank, monitor transactions and ask whether an account or payment details should be replaced. |
| Name and street address | Useful to scammers for making impersonation attempts look credible. |
| Telephone number and email address | Increase the risk of phishing calls, texts and emails. |
The report does not verify exposure of passwords, PINs, Social Security numbers, dates of birth, balances or transaction histories. Do not assume those details were involved unless your own notice specifically says so.
How serious is it?
Contact-information exposure
Names, addresses, phone numbers and email addresses can support convincing impersonation and phishing. They do not, by themselves, prove that an attacker can log in or move money.
Account-number exposure
An account number can be used in fraudulent payment attempts or social-engineering schemes. It is a reason to monitor the account and consult U.S. Bank, but it is not the same as exposure of an online-banking password or security code.
Rank #2
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
Credentials, identity documents and funds
No verified public evidence for this incident shows that login credentials, Social Security numbers, identity documents or customer funds were compromised. Watch your accounts anyway, because misuse can appear after an exposure.
How many people were affected?
A confirmed nationwide number is not publicly established. U.S. Bank contacted an unknown number of individuals, and a Massachusetts breach filing reportedly identified at least one Massachusetts resident. That filing does not establish the total number of affected customers.
What affected customers should do
- Read your notice closely. Record the incident date, listed data elements, response deadlines and any credit-monitoring or identity-restoration offer.
- Use an official contact route. Call the number on your card, navigate from U.S. Bank’s official website, or contact the Fraud Liaison Center at 877-595-6256. Do not use a number or link supplied in an unsolicited message.
- Review activity and statements. Check deposits, withdrawals, ACH payments, wires, debit- and credit-card transactions, new payees, transfer recipients and changes to your contact information.
- Change reused passwords. If your U.S. Bank password was reused elsewhere, replace it with a unique password there and on every service using the same or a similar credential. Change it promptly if the notice or bank representative says credentials were involved, you entered details into a suspicious site, or you receive unexpected login or reset messages.
- Turn on account alerts. In the mobile app, go to Main menu → Notifications → Account activity, then select the alert categories you want. Use the equivalent account-alert controls in online banking. Instructions are available in U.S. Bank’s alert guide.
- Consider credit protection based on the data listed. Names, addresses, email and phone numbers generally call for monitoring and phishing precautions. Account-number exposure calls for bank contact and transaction monitoring. If your letter lists a Social Security number, driver’s-license number or other identity document, consider a freeze with all three major credit bureaus and report suspected identity theft.
- Keep records. Save the letter, screenshots, suspicious messages, dates, case numbers and call notes.
Do not close or replace an account automatically. Replacing an account can disrupt direct deposit, payroll, automatic bills, linked payment apps, checks and recurring ACH instructions. Base that decision on evidence of misuse, your notice and U.S. Bank’s recommendation.
Rank #3
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
If you see an unauthorized transaction
- Call U.S. Bank immediately and use its stated reporting process.
- Ask whether the account, card or payment credentials should be blocked or replaced.
- Provide written follow-up if the bank requests it and retain proof.
- U.S. Bank says customers should report unauthorized transactions within 60 days after the first account statement showing the suspected transaction to maximize coverage under its stated policy. Earlier reporting is safer.
- For suspected identity theft, use the FTC’s IdentityTheft.gov recovery service; U.S. Bank also directs consumers there.
Scams that may follow an exposure
Be skeptical of anyone who already knows your name, partial account information or contact details. Common follow-up scams include:
- A caller claiming to be a U.S. Bank fraud investigator who asks for a one-time security code.
- A text or email directing you to a fake password-reset page.
- A “free credit monitoring” link that captures identity information.
- A request to move money to a supposedly safer account.
- Caller-ID spoofing that makes a fraudulent call appear to come from the bank.
U.S. Bank says it will not ask customers to provide online-banking login credentials to send or receive money. End the contact and call an official number yourself.
Should you freeze your credit?
A credit freeze is most useful when identity-document information, especially a Social Security number, may be exposed. It can make opening new credit less convenient and generally does not stop fraud on an existing bank account. A fraud alert is less restrictive but also less comprehensive.
Rank #4
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
If your notice lists only the categories publicly reported here—contact details and an account number—prioritize bank alerts, statement review, phishing resistance and password hygiene. If the data categories are unclear, ask U.S. Bank exactly what was involved before deciding.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What U.S. Bank has said publicly
U.S. Bank’s general privacy materials describe physical, technical and administrative safeguards, including firewalls, SSL encryption, security teams and secured facilities (developer-portal privacy statement). Those general descriptions do not explain the configuration error or prove that this particular incident was fully resolved.
The bank’s 2024 corporate-responsibility report says privacy and security incidents are subject to severity assessment, root-cause analysis, mitigation and corrective action (2024 report). That is a description of the stated framework, not independent confirmation of the April 2025 event’s outcome.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Best Value
- 【20 Minutes & 12 Sheets Shredder】Using advanced cooling system and patented cutting technology, paper shredder can continuous running up to 20 minutes, shred up to 12 sheets at a time, and also shred credit cards, staples, paper clips, and CDs.
- 【P-4 High Security】Micro-Cut shredder can shred paper into tiny particles of 13/64″ x 15/32"(5*12mm), security level P-4, which better protects your personal privacy. 70dB low noise running this shredder is very suitable for office, small office or home office.
- 【Jam-Proof System】Shredders for home office has overload protection functions protect you from paper jams, after pressing the power switch, just need to put the paper into the shredder inlet, this office shredder will work automatically.
- 【Personalized design】Bonsaii paper shredder for home use equipped with 4 Universal Casters, help you easy to move and stay at everywhere you want, Visible trash window to check the capacity of the waste basket at any time, easy and convenient.
- 【1-Year Warranty】Bonsaii provides a 1-year warranty on our products. If you encounter any problems during use, please feel free to contact us, we have professional customer service to help you within 24 hours.
What remains unknown
- The total number of affected individuals.
- Whether anyone downloaded or copied the information.
- The identity of the fraudulent actor.
- The exact system or application involved.
- How long the information was accessible.
- Whether passwords, PINs, Social Security numbers, balances or transaction histories were included.
- Whether the information has appeared online.
- Whether every affected person received credit monitoring or reimbursement.
- Whether regulators imposed penalties or incident-specific remediation.
Why a configuration error can expose data
Security incidents do not always involve malware breaking through a perimeter. Incorrect permissions, portal settings or connections between vendors and internal systems can make information visible to someone who should not have access. That general lesson does not identify the U.S. Bank system involved, but it explains why an exposure can occur without evidence of a conventional mass hack.
Do not confuse this with the separate CFPB case
The Consumer Financial Protection Bureau’s earlier U.S. Bank enforcement matter involved unauthorized account openings and use of credit-report information. It is separate from the April 2025 configuration-related exposure. The CFPB says that order was terminated on August 21, 2025, after U.S. Bank fulfilled specified obligations (CFPB case page).
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
