Main Street Bank notified Massachusetts customers of a suspected data compromise affecting a merchant's payment card environment from July 1, 2025, to May 5, 2026. The incident potentially exposed card names, numbers, and expiration dates. The bank stated its own systems were not compromised and that no SSNs or account numbers were retrieved. Customers were offered new debit cards and advised to monitor statements, place fraud alerts, and consider security freezes.