Key Highlights

  • Unauthorized access to a third‑party auditor’s servers exposed names, Social Security numbers and account details of select bank customers.
  • Somerset Regal Bank’s core systems remained untouched, preventing any interruption to account access or payment services.
  • SR Bancorp says the breach is unlikely to have a notable effect on its overall financial position.

SR Bancorp, Inc. (NASDAQ: SRBK) announced that a cybersecurity breach at its auditing partner exposed personal data belonging to some Somerset Regal Bank customers. The firm emphasized that its own operating platforms were not compromised and that there was no interruption to client services.

Breach Overview

The incident originated from Mercadien, the internal‑audit service provider for SR Bancorp and its banking subsidiary. An external actor gained entry to Mercadien’s server environment and extracted files containing sensitive customer records. SR Bancorp is cooperating with investigators to determine the breach’s origin and extent.

Exposed Information

Compromised records included identifiers such as full names, Social Security numbers, account identifiers and, in certain cases, government‑issued identification documents or birth dates. No evidence suggests that the data was used for fraudulent activity at this stage, but the exposure raises typical privacy concerns.

No Effect on Banking Operations

The breach did not involve any of Somerset Regal Bank’s operational infrastructure. Consequently, customers continued to access their accounts, conduct payments and use core banking services without delay. The bank’s technology stack and payment processing networks remain fully functional.

Customer Notification Process

In compliance with federal and state regulations, Somerset Regal Bank is delivering notices to affected individuals through Mercadien. The communications outline the nature of the exposure and provide guidance on protective measures, such as monitoring credit reports and employing identity‑theft safeguards.

Financial Impact Assessment

SR Bancorp’s management has evaluated the financial ramifications and determined that the event is unlikely to significantly change the company’s overall results. The firm continues to monitor potential costs related to legal exposure, remediation efforts and any future regulatory actions.

Ongoing Cybersecurity Measures

The company reaffirmed its commitment to data protection, stating that additional security controls are being implemented across all vendor relationships. Continuous monitoring and risk‑assessment programs are being enhanced to deter similar incidents in the future.

This article is for informational purposes only and does not constitute financial advice. Please consult a licensed financial adviser before making investment decisions.