U.S. bank disclose security lapse after sharing customer data with AI app

Community Bank, which serves customers in Pennsylvania, Ohio, and West Virginia, has revealed a significant cybersecurity breach that has compromised sensitive personal information. According to an 8-K filing submitted to the U.S. Securities and Exchange Commission on May 7, the bank reported that clients' names, dates of birth, and Social Security numbers were inadvertently exposed due to the use of an unauthorized AI-based software application. The bank's statement indicated that the decision to disclose this incident stemmed from the high volume and sensitive nature of the non-public information involved. Details surrounding the incident remain murky, but the filing suggests that a staff member may have uploaded customer data to an online AI chatbot, inadvertently making this information accessible to the creators of the software. While the exact number of affected customers has not been disclosed, Community Bank is actively assessing the extent of the breach and is notifying impacted individuals in compliance with applicable regulations. John Montgomery, the bank's chief executive, has yet to respond to inquiries from TechCrunch regarding the matter. The situation was initially reported by The Register, raising concerns about data security practices in banking institutions.