DisclosureLens
HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

CITIZENS BANK

bd_5d22d33ee4bd9c37 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 28, 2026

To disclose

—

Affected

428state residents only

Confidence

67%
Full breach record for CITIZENS BANK →14 incidents on file

Citizens Bank, NA notified customers of a data security incident involving a third-party vendor's systems. The incident exposed account information appearing on written checks, including name, address, and account number. No specific dates for discovery or occurrence were provided in the notice. Citizens is offering two years of complimentary credit monitoring via Equifax and waiving fees for account closures and reopenings. The incident affected residents in 23 states.

Incident timeline — partial

? — ?

Breach window unknown

Apr 28, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed428 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.