DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

OR: Former Bank Manager Guilty of Identity Theft, Bank Fraud

Posted on May 9, 2012 by Dissent

Another insider breach involving bank personnel:

Randy Arlan Mainwaring, 41, former manager of the Thurston Branch of Key Bank in Springfield, Oregon, pled guilty to identity theft and bank fraud in federal court Monday. He is scheduled to be sentenced on July 17, 2012 before U.S. District Judge Michael R. Hogan.

In pleading guilty, Mainwaring admitted that on January 29, 2007, while serving as the manager of the Thurston branch of Key Bank, with the intent to deceive Key Bank, he used a Social Security account number of another person—a previous Key Bank account holder—to open up a bank account at Key Bank without that person’s authorization. He also admitted that on May 10, 2007, as the manager of the Thurston branch of Key Bank, he transferred the names, dates of birth, and Social Security account numbers of 2,937 present or previous account holders of Key Bank to his personal e-mail account. He admitted that he transferred this identification without authorization of Key Bank or the account holders, intending to use them for his personal financial gain. Mainwaring also admitted that in August 2010, he attempted to obstruct justice by threatening and intimidating a witness. Mainwaring agreed that his sentence should be increased because (1) the offense involved more than 250 victims; (2) he used personally identifiable information of another person to open up a bank account without authorization; (3) he abused a position of trust; and (4) he obstructed justice by threatening and intimidating a witness.

As a result of his conduct, Key Bank incurred $44,937.66 in expenses, including credit monitoring services to the affected account holders. Mainwaring agreed to pay restitution in that amount to Key Bank.

The maximum statutory penalty for bank fraud is 30 years in prison and a $1,000,000 fine, followed by a five-year term of supervised release. The maximum statutory penalty for identity theft is five years in prison and a $250,000,000 fine, followed by a three-year term of supervised release.

The case is being investigated by the Federal Bureau of Investigation and is being prosecuted by Assistant U.S. Attorney Sean B. Hoar.

Source: U.S. Attorney’s Office, Oregon


Related:

  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
  • Resource: NY DFS Issues New Cybersecurity Guidance to Address Risks Associated with the Use of Third-Party Service Providers
  • TX: Kaufman County Faces Cybersecurity Attack: Courthouse Computer Operations Disrupted
  • KT Chief to Resign After Cybersecurity Breach Resolution
  • Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
Category: Breach IncidentsFinancial SectorInsiderU.S.

Post navigation

← TPB Release Message in light of VirginMedia Attacks By Anonymous
UNC-Charlotte breach affects 350,000 →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says
  • The Case for Making EdTech Companies Liable Under FERPA
  • NHS providers reviewing stolen Synnovis data published by cyber criminals

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation
  • Who’s watching the watchers? This Mozilla fellow, and her Surveillance Watch map

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.