River City Bank, Inc.

River City Bank disclosed an insider threat incident where an employee exceeded authorized access, downloading customer data to a personal drive and sending it to a third party. The bank discovered the unauthorized activity on September 29, 2020, immediately restricted the employee's access, and reported the incident to law enforcement. A forensic investigation was conducted. Affected individuals were offered two years of complimentary identity monitoring services through Kroll. The bank is implementing additional security measures and employee training to prevent recurrence.