US bank discloses security lapse after sharing customer data with AI app

Community Bank, serving customers in Pennsylvania, Ohio, and West Virginia, has revealed a serious cybersecurity breach that has compromised sensitive customer information including names, birth dates, and Social Security numbers. In a recent filing with the U.S. Securities and Exchange Commission, dated May 7, the bank acknowledged the incident stemmed from the use of an unauthorized AI software application. The bank's disclosure highlights the magnitude and sensitivity of the exposed non-public information. Although the specific details surrounding the breach remain unclear, the filing suggests that an employee of Community Bank may have inadvertently uploaded customer data to an AI chatbot, leading to potential exposure to the developers of that application. While the bank has not specified the number of customers impacted or identified the AI application involved, it confirmed that it is actively assessing the affected data and notifying customers as required by law. Community Bank's CEO, John Montgomery, has not yet commented on the situation. The incident was initially reported by The Register, raising concerns about the security of personal data in the age of artificial intelligence.