SR Bancorp discloses vendor data breach exposing customer SSNs and account numbers

Filed July 10, 2026 · Period ending July 10, 2026 · ~1 min read

Key Changes

• high

  Internal audit vendor Mercadien suffered unauthorized access to files containing customer names, SSNs, account numbers, ID documents, and dates of birth for certain bank customers.

  Item 8.01 verify on EDGAR →
• medium

  The breach occurred on Mercadien's servers; Somerset Regal Bank's own systems, operations, payment infrastructure, and customer account access were not impacted.

  Item 8.01 verify on EDGAR →
• medium

  Management does not expect a material impact on consolidated financial condition or results, though forward-looking statements acknowledge potential legal, regulatory, and reputational risks.

  Item 8.01 verify on EDGAR →