technology
Community Bank Reports Data Exposure Involving Employee Use of Unauthorized AI Application
Community Bank filed an 8-K with the U.S. Securities and Exchange Commission on May 7, 2026, revealing that an unauthorized artificial intelligence-based software application exposed customers’ names, dates of birth, and Social Security numbers. The Pennsylvania, Ohio and West Virginia bank said it is evaluating the affected data and sending notifications in accordance with relevant laws.
May 12, 12:36 PM·1m read1 source
americanbanker.comAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Community Bank disclosed a cybersecurity incident that exposed customers’ names, dates of birth, and Social Security numbers after an employee used an unauthorized artificial intelligence-based software application. U.S. Securities and Exchange Commission dated May 7, 2026.
The bank said the security lapse was due to the use of an “unauthorized” AI software app. Community Bank said it disclosed the incident due to the volume and sensitive nature of the non-public information at issue. It is evaluating the customer data that was affected and is sending notifications in accordance with relevant laws.
TechCrunch reported that Community Bank did not disclose how many customers were affected by the incident, nor what AI application was involved. The bank operates in Pennsylvania, Ohio, and West Virginia. John Montgomery is chief executive of Community Bank.
Montgomery did not immediately respond to a request for comment. The Register first reported the security lapse. TechCrunch posted its story at 9:36 AM PDT on May 12, 2026. The article was written by Lorenzo Franceschi-Bicchierai.
““due to the volume and sensitive nature of the non-public information at issue.” — Community Bank 8-K filing The filing makes clear the bank chose to notify regulators and customers because of the scale and sensitivity of the exposed data even while its internal review continues. No further details on the precise mechanism of the exposure or the identity of the AI tool have been released.”
