Salem Five Bank notified Massachusetts customers of a security incident at a merchant involving unauthorized access to transaction data between November 3, 2014, and May 21, 2026. The incident potentially compromised customer names and debit card numbers. The bank issued new debit cards, closing the compromised cards on June 25, 2026, and provided guidance on monitoring accounts and placing fraud alerts.