One linked filing — more sources may join as they report · filed Jul 10, 2026. View entity profile → Other incidents for this victim →
incident inc_c9b0a2ff59cc44a2 · merge_method deterministic
Materiality determination to SEC 8-K filing
Not recorded for this incident
Discovery variance · Leak precedence · Materiality delta · Filing span — no leak-site claim in this cluster; needs two dated filings.
Government ID · Identity (basic) · Financial account
FEDERAL
all SEC 8-K
Earliest sighting first · deep chronology in Litigation Timeline
Jul 10, 2026
Registrant determined the incident material — starts the SEC 4-business-day clock
SR Bancorp, Inc. (via its subsidiary Somerset Regal Bank) disclosed a data security incident involving its third-party internal audit provider, Mercadien, P.C. An unauthorized actor accessed files on Mercadien's servers containing customer data, including names, SSNs, account numbers, IDs, and dates of birth. The Bank's own systems were not impacted. Customer notifications are being provided.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.