CA AG posting (29 Oct) and notice letter dated 3 Nov: the Branch's audit firm Mercadien, P.C. had a data security incident; Branch informed 12 Aug 2026 that customer personal information (name, address, DOB, SSN) was in files accessed by an unauthorized party. Old incident (breach date listed 17 Sep 2025), new notice in window. No operational impact to the bank.
Other explanations considered: AG lists do not state cause; may be vendor breach, misdirected mail, or insider error rather than intrusion.
- Sep 17 · DISState AG breach posting in window. Incident date 2025-09-17; posted 2026-10-29; records not stated. Disclosure lag about 407 days.Source
- Sep 17 00:00 UTC · DISCA AG posting (29 Oct) and notice letter dated 3 Nov: the Branch's audit firm Mercadien, P.C. had a data security incident; Branch informed 12 Aug 2026 that customer personal information (name, address, DOB, SSN) was in files accessed by an unauthorized...Source