BayFirst National Bank

BayFirst National Bank, a subsidiary of BayFirst Financial Corp., disclosed in a Form 8-K Item 1.05 that on August 14, 2025 it was notified of a cybersecurity incident at a third-party marketing services provider. On October 28, 2025, the provider confirmed that personal information of some BayFirst customers — including names, dates of birth, and Social Security/tax identification numbers — was accessed without authorization. The incident was limited to the third-party provider's environment. Financial impact has not been quantified.