DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

OR: Former Bank Manager Guilty of Identity Theft, Bank Fraud

Posted on May 9, 2012 by Dissent

Another insider breach involving bank personnel:

Randy Arlan Mainwaring, 41, former manager of the Thurston Branch of Key Bank in Springfield, Oregon, pled guilty to identity theft and bank fraud in federal court Monday. He is scheduled to be sentenced on July 17, 2012 before U.S. District Judge Michael R. Hogan.

In pleading guilty, Mainwaring admitted that on January 29, 2007, while serving as the manager of the Thurston branch of Key Bank, with the intent to deceive Key Bank, he used a Social Security account number of another person—a previous Key Bank account holder—to open up a bank account at Key Bank without that person’s authorization. He also admitted that on May 10, 2007, as the manager of the Thurston branch of Key Bank, he transferred the names, dates of birth, and Social Security account numbers of 2,937 present or previous account holders of Key Bank to his personal e-mail account. He admitted that he transferred this identification without authorization of Key Bank or the account holders, intending to use them for his personal financial gain. Mainwaring also admitted that in August 2010, he attempted to obstruct justice by threatening and intimidating a witness. Mainwaring agreed that his sentence should be increased because (1) the offense involved more than 250 victims; (2) he used personally identifiable information of another person to open up a bank account without authorization; (3) he abused a position of trust; and (4) he obstructed justice by threatening and intimidating a witness.

As a result of his conduct, Key Bank incurred $44,937.66 in expenses, including credit monitoring services to the affected account holders. Mainwaring agreed to pay restitution in that amount to Key Bank.

The maximum statutory penalty for bank fraud is 30 years in prison and a $1,000,000 fine, followed by a five-year term of supervised release. The maximum statutory penalty for identity theft is five years in prison and a $250,000,000 fine, followed by a three-year term of supervised release.

The case is being investigated by the Federal Bureau of Investigation and is being prosecuted by Assistant U.S. Attorney Sean B. Hoar.

Source: U.S. Attorney’s Office, Oregon


Related:

  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
  • Resource: NY DFS Issues New Cybersecurity Guidance to Address Risks Associated with the Use of Third-Party Service Providers
  • TX: Kaufman County Faces Cybersecurity Attack: Courthouse Computer Operations Disrupted
  • KT Chief to Resign After Cybersecurity Breach Resolution
  • Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
Category: Breach IncidentsFinancial SectorInsiderU.S.

Post navigation

← TPB Release Message in light of VirginMedia Attacks By Anonymous
UNC-Charlotte breach affects 350,000 →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Attleboro investigating ‘cybersecurity incident’ impacting city’s IT systems
  • Fired techie admits sabotaging ex-employer, causing $862K in damage
  • Threat actors have reportedly launched yet another campaign involving an application connected to Salesforce
  • Russian hackers target IVF clinics across UK used by thousands of couples
  • US, allies sanction Russian bulletproof hosting services for ransomware support
  • Researchers claim ‘largest leak ever’ after uncovering WhatsApp enumeration flaw
  • Large medical lab in South Africa suffers multiple data breaches
  • Report released on PowerSchool cyber attack
  • Sue The Hackers – Google Sues Over Phishing as a Service
  • Princeton University Data Breach Impacts Alumni, Students, Employees

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Cole v. Quest Diagnostics: The Third Circuit Weighs in on Pixels, Privacy, and Medical Data
  • Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables
  • Researchers claim ‘largest leak ever’ after uncovering WhatsApp enumeration flaw
  • CIPL Publishes Discussion Paper Comparing U.S. State Privacy Law Definitions of Personal Data and Sensitive Data
  • India’s Digital Personal Data Protection Act 2023 brought into force

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.