Archive — US — techcrunch
U.S. bank disclose security lapse after sharing customer data with AI app
Community Bank revealed a cybersecurity incident where customer data, including names and Social Security numbers, was exposed through an unauthorized AI application. The bank notified the SEC about the incident and is currently evaluating the affected data while sending customer notifications. Details on the specific AI app or number of customers involved remain undisclosed.
Key points
- Community Bank operates in Pennsylvania, Ohio, and West Virginia.
- A cybersecurity incident exposed names, dates of birth, and Social Security numbers of customers.
- The exposure was linked to an unauthorized AI-based software application.
- The incident was disclosed in an 8-K filing to the SEC on May 7.
- The bank has not revealed the number of affected customers or the specific AI application involved.
- The CEO did not comment on the incident, indicating limited public response.
Why it matters
- Security lapses involving AI tools have become a growing concern as more organizations adopt AI technology.
- Similar incidents have raised questions about the security and ethical implications of using AI for data handling.
- In 2023, there have been increased regulatory discussions around AI usage, focusing on data protection.
The exposure incident at Community Bank underscores the potential risks of integrating AI technologies in financial services, amplifying the urgent need for robust cybersecurity measures as reliance on such technologies increases.