AccidentalFinancial ServicesFinanceMisdeliverySupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountFinancialMediumResolved

Centennial Bank, including its division Happy State Bank

bd_9cb4046dd9113585 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Aug 17, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

69%

Full breach record for Centennial Bank, including its division Happy State Bank →

Centennial Bank notified Massachusetts residents that a third-party service provider, Fidelity Information Services (FIS), inadvertently sent a file containing customer personal information (including names, addresses, dates of birth, account numbers, and Social Security numbers) to an unintended recipient at another financial institution on August 7, 2026. The Bank was notified by FIS on August 17, 2026. The unintended recipient confirmed deletion of the file. The Bank and FIS took immediate steps to contain the incident, including recalling the email and terminating access. FIS retrained the associate and implemented enhanced validation procedures. The Bank offered 24 months of complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 10 days

Aug 7, 2026

Begins

Aug 17, 2026

Discovered

Sep 1, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Texas State AGbd_d973b0bff75362f42026-09-17 · +16dVerified

Name: Centennial Bank
norm: centennial bank

Name: Centennial Bank, including its division Happy State Bank
norm: centennial bank including its division happy state bank
Industry: Financial Servicesllm

Discovered: Aug 17, 2026
Breach occurred: Aug 7, 2026
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial
Attack vector: Third-Party / Supply Chain
Threat actor: Partner
Third party: via Fidelity Information Services

During the incident: FIS immediately recalled the email and terminated access to the file
FIS sent a formal request for deletion to the unintended recipient
The Bank conducted its own review of the incident to ensure all appropriate safeguards are in place
The Bank initiated enhanced monitoring of affected accounts
The Bank is coordinating with FIS to ensure appropriate remediation measures are implemented
Arranged for 24-month complimentary membership to identity monitoring services through Epiq
Changes made: FIS has retrained the associate responsible
FIS implemented enhanced validation procedures to prevent similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 1 · first · this page

Texas State AG+16d

Pattern: first filing Sep 1 (MA), last Sep 17 (TX) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1555-centennial-bank-including-its-division-happy-state-bank/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 106a157648abd869836077c138b45e350759975777bebefcda57775ab38c0e9d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCentennial Bank

Victim entityCentennial Bank, including its division Happy State Bank

Incidentdiscovered Aug 17, 2026

Stated responseFIS immediately recalled the email and terminated access to the file

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov