SR Bancorp discloses data security incident at internal audit provider
SR Bancorp reported that Mercadien, P.C. CPAs, which provides internal audit-related services to the company and Somerset Regal Bank, discovered an unauthorized actor accessed and acquired certain files containing Bank customer data, including names, social security numbers, account numbers, identification documents, and dates of birth. The Bank's own business systems were not impacted, and operations and customer services were not disrupted. The company stated the incident is not expected to have a material impact on consolidated financial condition or results of operations.
Key facts
- Unauthorized actor accessed files on Mercadien's computer servers containing Bank customer data
- Data included name, social security number, account numbers, identification documents and/or date of birth for certain Bank customers
- Somerset Regal Bank's business systems were not involved in or impacted by the incident
- No disruption to Bank's operations, customer access to accounts or services, payment systems, or core information technology infrastructure
- Bank is providing customer notifications through Mercadien as required by applicable federal and state laws and regulatory guidance
- As of disclosure date, incident has not had, and is not expected to have, a material impact on Company's consolidated financial condition or results of operations
Why it matters
The incident affects customer data held by SR Bancorp's external service provider, exposing the company to regulatory notification requirements, reputational risk, and potential legal liability, though the company has assessed the financial impact as immaterial to date.
Share
Derived from 8-K filed 2026-07-10. Not investment advice. View the source filing on SEC.gov →