FEDERALItem 8.01 · voluntaryHackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumActive
Somerset Regal Bank
bd_62f1c74b3269f35e · schema v1 · pii pii-v1
Full breach record for Somerset Regal Bank →SR Bancorp, Inc. (via its subsidiary Somerset Regal Bank) disclosed a data security incident involving its third-party internal audit provider, Mercadien, P.C. An unauthorized actor accessed files on Mercadien's servers containing customer data, including names, SSNs, account numbers, IDs, and dates of birth. The Bank's own systems were not impacted. Customer notifications are being provided.
SEC clockMateriality determined Jul 10, 2026 → Filed Jul 10, 20260d ✓ SEC 4-day OK
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1951276/000094337426000261/srbk-20260706.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jul 10, 2026
- Raw hash
- a3a0d4d93f4facce557160dacbdfdf0cedbcb6356a68dbe6e676c3c1ce873521
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- SR BANCORP, INC.norm: sr bancorp
- SEC CIK
- 0001951276
Victim entity
- Name
- Somerset Regal Banknorm: somerset regal bank
Incident
- Discovered
- —
- Materiality determined
- Jul 10, 2026
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Mercadien, P.C. CPAs
Compliance
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jul 10, 2026→ Filed: Jul 10, 20260d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.