MainStreet Bancshares in Fairfax, Va., disclosed a data security incident that exposed information tied to less than 5% of its customers.
The company disclosed in a regulatory filing that it became aware in March that an outside vendor to the core bank had been compromised. MainStreet activated its incident response process, concluding that “the incident’s impact would likely not be material.”
MainStreet said it “swiftly” ceased all activity with the provider and notified its regulators.
The company determined that its own IT systems and networks were not compromised, no unauthorized transactions were executed, no monies were transferred, and customers were able to continue to execute transactions.
By May 26, “appropriate monitoring systems were established,” and impacted customers were notified and given tools to monitor any suspicious activity.