Summary

• An unauthorized external AI application was used to handle confidential Community Bank customer information.
• Reportedly exposed data included names, dates of birth, and Social Security numbers.
• The incident was attributed to internal misuse rather than hacking, ransomware, or a direct intrusion.
• Community Bank secured the information, began an investigation with outside cybersecurity advisers, and initiated customer notifications.
• The bank said account access, payment systems, and core IT operations were not disrupted, but classified the incident as material.
• AI-related risks also include deepfake impersonation, fraudulent payment requests, and attempts to obtain credentials or system access.
• The incident highlights tension between rapid workplace AI adoption and controls governing sensitive financial data.