On May 21, 2026, Legacy Bank and Trust experienced a cyber event involving unauthorized access to an employee email account. The bank worked with third-party specialists to investigate the incident, and a comprehensive review of affected emails and attachments was completed on August 10, 2026. Official notice was provided to consumers and regulators on August 19, 2026. The investigation determined that Social Security numbers, financial account information, driver’s license numbers, other government-issued identification, tax identification numbers, login information, names, dates of birth, addresses, and medical information may have been exposed. The total number of affected individuals has not been publicly disclosed. The bank operates in Missouri, Oklahoma, and Texas, and an official notice was filed in Massachusetts. Legacy Bank and Trust has posted a website notice regarding the incident and is offering identity protection services. Details, such as the exact number of impacted individuals, may emerge as investigations proceed, and notices may be delayed for some affected parties.