Bank3, a financial services company based in Memphis, Tennessee, reported a data incident to state regulators in April 2026. Official notice letters were sent to affected individuals around April 15, 2026. The breach involved unauthorized access to Bank3's systems between July 25, 2025, and August 7, 2025, during which certain information was viewed or copied.
The types of data exposed include names, dates of birth, Social Security numbers, taxpayer identification numbers, driver's license or state identification numbers, financial account information, payment card information, and health insurance information. A total of 11,512 individuals were affected. Bank3 has stated that at the time of the notice, there was no evidence of identity theft or fraud as a result of the incident.
Details about data breaches can emerge over time. Affected individuals should review the notice from Bank3 and utilize any offered identity protection services. Bank3 sent notifications to state Attorneys General in Indiana, Maine, Massachusetts, New Hampshire, and Texas.