SR Bancorp Reports Data Breach at Third-Party Auditor Exposing Customer PII
SRBK sits 40% above its 52-week low of $13.55.
Summary
SR Bancorp disclosed that its third-party internal auditor, Mercadien, suffered a data breach exposing sensitive customer information including social security numbers and account numbers. The bank's own systems were unaffected, and no material financial impact is expected.
Key Events · Legal and Risk Events · SRBK
-
Third-Party Data Breach
Mercadien, P.C. CPAs, the bank's internal audit services provider, experienced a data security incident where an unauthorized actor accessed and acquired files containing Bank customer data, including names, social security numbers, account numbers, identification documents, and dates of birth.
-
Bank Systems Unaffected
Somerset Regal Bank's own business systems, operations, customer account access, payment systems, and core IT infrastructure were not involved or impacted by the incident.
-
Customer Notification Underway
The Bank is providing customer notifications through Mercadien as required by applicable federal and state laws and regulatory guidance.
-
No Material Financial Impact Expected
As of the filing date, the incident has not had, and is not expected to have, a material impact on the Company's consolidated financial condition or results of operations.
Analysis · SRBK · Finance
A data security incident at Mercadien, P.C. CPAs — the bank's internal audit services provider — resulted in unauthorized access to sensitive customer information including social security numbers, account numbers, and identification documents. While the bank's own systems were not compromised and no operational disruption occurred, the exposure of personally identifiable information (PII) carries regulatory, reputational, and potential legal risk. The company states the incident is not expected to have a material financial impact, but the full scope of affected customers and any regulatory scrutiny remain unknown. For a community bank with a $139M market cap, a data breach involving core customer data is a notable risk event that warrants investor attention.
At the time of this filing, SRBK was trading at $18.93 on NASDAQ in the Finance sector, with a market capitalization of approximately $138.9M. The 52-week trading range was $13.55 to $20.20. This filing was assessed with negative market sentiment and an importance score of 7 out of 10.