Columbia Bank
ent_019e5c2f4a177b7e8c9da98bd6956951
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7,067
as filed · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Columbia Bank
- Normalized
- columbia bank— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493005LKFCLR81TSN28
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Columbia Financial, Inc.— per SEC Exhibit 21 filing
Disclosure history (3)newest first
- 🦫Oregon State AGas victim2026-04-17
Colombia Bank reported a data breach to the Oregon Attorney General. The breach was reported on 2026-04-17. The breach occurred during 10/2/2025 - 12/22/2025. The breach was discovered on 12/19/2025. 7,067 individuals were affected. Notice was sent on 4/17/2026.
- 🌲Washington State AGas victim2026-04-17
Columbia Bank, a finance sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2025-12-19 and filed notice on 2026-04-17. 1,607 Washington residents were affected. 119 days elapsed between awareness and notification. 78 days to identify the breach. 3 days to contain the breach.
- 🐻California State AGas victim2026-04-17
Columbia Bank notified California residents that an unknown, unauthorized third party gained access to certain Columbia Bank applications and information between October 2, 2025 and December 22, 2025. The bank engaged a forensic security firm, secured its systems, and notified law enforcement. On March 6, 2026, review concluded the data accessed contained personal information including name, Social Security number, driver's license number, and financial account number. Columbia Bank is offering affected individuals one year of Experian IdentityWorks Credit 3B monitoring. Notification was not delayed by law enforcement. The number of affected individuals is not disclosed in this sample notice.