ClassAction.org reported in April 2026 an investigation into a potential data breach affecting M&T Bank customers. The report suggests that attorneys are seeking individuals affected by a security incident involving a third-party service provider where customer information may have been compromised. However, no official confirmation of a 2026 data breach for M&T Bank has been found from other sources.
The specific types of data compromised, the number of individuals affected, and the states impacted by this reported 2026 incident remain unclear as no corroborating evidence has been published. It is important to note that M&T Bank was a downstream customer in the MOVEit exploit, a vendor breach that occurred in 2023-2024, but this is a separate incident. The company’s own systems were reportedly not impacted in the April 2026 incident described by ClassAction.org.
Details surrounding this reported breach may emerge later, and official notifications may be delayed.