Columbia Bank
ent_019e5c2f4a177b7e8c9da98bd6956951
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7,067
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Columbia Bank
- Normalized
- columbia bank— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493005LKFCLR81TSN28
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Columbia Financial, Inc.— per SEC Exhibit 21 filing
Disclosure history (5)newest first
- Oregon State AGas victim2026-04-17
Colombia Bank reported a data breach to the Oregon Attorney General. The breach was reported on 2026-04-17. The breach occurred during 10/2/2025 - 12/22/2025. The breach was discovered on 12/19/2025. 7,067 individuals were affected. Notice was sent on 4/17/2026.
- Nebraska State AGas victim2026-04-17
Columbia Bank notified Nebraska AG of a data breach where an unauthorized third party accessed bank applications between October 2, 2025, and December 22, 2025. The incident involved personal information including names, SSNs, driver's license numbers, and financial account numbers. Columbia Bank engaged law enforcement and a forensic firm, secured systems, and offered one year of Experian IdentityWorks credit monitoring to affected individuals. Notification was sent on March 6, 2026.
- Washington State AGas victim2026-04-17
Columbia Bank notified Washington AG of a data breach affecting 1,607 residents. Unauthorized access occurred Oct 2–Dec 22, 2025, involving personal info (names, SSNs, driver’s licenses, financial accounts). Discovered Dec 19, 2025. Response included forensic investigation, law enforcement notification, and credit monitoring services.
- California State AGas victim2026-04-17
Columbia Bank notified California residents that an unknown, unauthorized third party gained access to certain Columbia Bank applications and information between October 2, 2025 and December 22, 2025. The bank engaged a forensic security firm, secured its systems, and notified law enforcement. On March 6, 2026, review concluded the data accessed contained personal information including name, Social Security number, driver's license number, and financial account number. Columbia Bank is offering affected individuals one year of Experian IdentityWorks Credit 3B monitoring. Notification was not delayed by law enforcement. The number of affected individuals is not disclosed in this sample notice.
- Massachusetts State AGas victim2017-10-06
Columbia Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-10-06. 1 Massachusetts residents were affected. The report records the breach type as electronic.