Meriplex Communications, Ltd., an IT service provider for Malaga Bank, reported that a former employee downloaded customer data including names and Social Security numbers. The incident occurred between November 17, 2021, and August 30, 2022, and was discovered on August 30, 2022. Meriplex terminated the employee, notified law enforcement, engaged forensic investigators, and implemented security controls. Affected individuals are offered 24 months of credit monitoring.