CITIZENS BANK
ent_019dea4a2341cd86dc4c235f2d83b0f5
Disclosures
16
State AG · Leak Site · 5 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
8,358
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- CITIZENS BANK
- Normalized
- citizens bank— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900RQ2FMUUUQUGI02
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- citizensbank.com
Disclosure history (16)newest first
- Massachusetts State AGas victim2026-08-10
Citizens Bank notified customers that their account information (name, address, credit/debit card number, expiration, and security code) was accessed outside authorized business purposes and shared with a third-party vendor between April 23, 2026, and May 15, 2026. The bank issued replacement cards for affected accounts and offered two years of complimentary credit monitoring and identity protection services.
- Massachusetts State AGas victim2026-04-28
Citizens Bank, NA notified customers of a data security incident involving a third-party vendor's systems. The incident exposed account information appearing on written checks, including name, address, and account number. No specific dates for discovery or occurrence were provided in the notice. Citizens is offering two years of complimentary credit monitoring via Equifax and waiving fees for account closures and reopenings. The incident affected residents in 23 states.
- GLOBALLeak Siteas victim2026-04-20
Citizens Bank is a major American retail and commercial bank headquartered in Providence, Rhode Island. Operating within the financial services industry, it offers a wide range of products including personal and business banking, loans, mortgages, credit cards, and wealth management services. It serves millions of customers across the United States through branches, ATMs, and digital banking platforms.
- Maine State AGas victim2025-03-28
Citizens Bank (Johnston, RI) reported an inadvertent disclosure that occurred on 03/04/2025 and was discovered on 03/06/2025. One Maine resident was affected out of 12 total individuals. The breach was classified as an inadvertent disclosure (accidental/error). Affected individuals were notified by written notice on 03/27/2025. Citizens Bank offered a two-year identity theft credit monitoring service (myTrueIdentity by TransUnion Interactive) to those affected.
- Maine State AGas victim2024-12-10
Citizens Bank (Johnston, RI) reported an insider wrongdoing incident to the Maine AG. An internal actor engaged in unauthorized activity between October 23, 2023 and July 16, 2024. The breach was discovered on October 23, 2024. Two Maine residents were among 8,358 total individuals affected. Notifications were sent on December 6, 2024. Affected individuals were offered 24 months of TransUnion TrueIdentity identity theft protection.
- Massachusetts State AGas victim2024-09-27
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-09-27. 13 Massachusetts residents were affected.
- Vermont State AGas victim2024-09-26
Citizens Bank notified Vermont AG on 2024-09-26 of an incident where images containing customer PII (name, SSN, account number) were shared with an unauthorized party between Jan-Jun 2024. ~100 customers affected. Bank offered 2 years of TransUnion credit monitoring.
- Massachusetts State AGas victim2024-06-03
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-03. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2022-04-15
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-04-15. 209 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2021-08-04
Citizens Bank, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-08-04. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2021-07-20
Citizens Bank, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-20. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2021-06-16
Citizens Bank, N.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-16. 1,341 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2021-01-01
CITIZENS BANK filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-223). The register records the breach as discovered on March 24, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Massachusetts State AGas victim2015-03-05
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-03-05. 4 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2008-06-23
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-06-23. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2008-03-31
Citizens Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-03-31. 450 Massachusetts residents were affected. The report records the breach type as paper.
Subsidiary disclosures (4)filed by group companies
◈ These filings were made by or about subsidiaries of CITIZENS BANK — not by CITIZENS BANK itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- Massachusetts State AGvia Acclivity Financial2021-08-31
Acclivity Financial, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-08-31. 5 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGvia Acclivity Financial2021-04-16
Acclivity Financial, LLC, a subsidiary of Citizens Bank, a Tennessee banking corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-16. 17 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGvia Acclivity Financial2021-04-16
Acclivity Financial, LLC, a subsidiary of Citizens Bank, reported an external system breach (hacking) that occurred on October 2, 15, and 16, 2020. The breach was discovered on January 7, 2021, and affected 5 Maine residents. The compromised information included names and Social Security numbers. In response, the company offered two years of complimentary credit monitoring, identity theft protection, and Dark Web monitoring services through Identity Theft Guard Solutions.
- New Hampshire State AGvia Acclivity Financial2021-04-16
Acclivity Financial, LLC, a subsidiary of Citizens Bank, reported a phishing incident affecting 5 New Hampshire residents. Unauthorized parties used compromised credentials to access employee email accounts between October 2 and 16, 2020, potentially exposing SSNs, financial account info, and driver's licenses. The company provided 2 years of credit monitoring and enhanced email security.