CB Financial Services in Carmichaels, Pa., disclosed that its bank was the victim of a cyberattack.
The company disclosed in a regulatory filing that its bank became aware on May 5 of “an internal incident involving the handling of certain non‑public customer information” using an unauthorized AI-based software application.
The bank took measures to secure the data at issue and initiated an internal probe with the assistance of external cybersecurity advisers. The investigation is ongoing but the bank said that the customer data disclosed included customer names, social security numbers and dates of birth.
While the incident did not involve a disruption to the bank’s operations, customer access to accounts or services, payment systems, or core IT infrastructure.
The company is evaluating the affected data and is notifying anyone impacted while remaining in contact with banking and financial regulators.