Archive — US — techcrunch
US bank discloses security lapse after sharing customer data with AI app
Community Bank disclosed a cybersecurity incident where customer data was exposed after an employee may have unknowingly uploaded it to an unauthorized AI application. The breach, reported in an SEC filing, included sensitive information like names and Social Security numbers. The bank is evaluating the extent of the breach and notifying affected customers.
Key points
- Community Bank operates in Pennsylvania, Ohio, and West Virginia.
- The bank reported a cybersecurity incident on May 7 in an 8-K filing.
- Customer data exposed includes names, dates of birth, and Social Security numbers.
- The cause was likely the use of an unauthorized AI-based software application by an employee.
- Details on the number of customers affected or the specific AI application were not disclosed.
- The bank is evaluating the impact and notifying customers as required by law.
Why it matters
- The incident highlights ongoing concerns about data privacy and security with AI applications.
- Similar breaches have raised alarms post-2022 as organizations increasingly adopt AI technology.
- By 2025, trends indicate a greater regulatory focus on data protection and stricter compliance requirements for handling sensitive information.
This incident underscores the critical need for organizations to implement stringent data security measures, especially with emerging AI technologies, to protect sensitive customer information.