Your bank has recently been targeted by cyber attackers who have compromised the institutions network and stolen some customers online account credentials to conduct account takeovers.

Your team is responsible for reporting the incident to law enforcement and regulatory authorities which includes filing Suspicious Activity or Transaction Reports (SAR/STR) You are reviewing accounts that are thought to have been affected to determine if reporting is needed.

Which of the findings below would MOST likely trigger a SAR/STR report?