TCM Bank, N.A. notified California residents of a data breach involving a third-party vendor's website misconfiguration. The incident occurred from March 5, 2017, to July 17, 2018, and was discovered on July 16, 2018. Personal information accessed included names, addresses, Social Security numbers, and dates of birth. TCM Bank remediated the issue, implemented new vendor controls, provided employee training, and offered one year of complimentary credit monitoring via Experian IdentityWorks.