Banner Capital Bank Investigates Data Breach Affecting Customer Financial Data
On February 20, 2026, Banner Capital Bank, a Nebraska-based commercial bank serving customers in Nebraska and Wyoming, detected unauthorized access to an employee’s email accounts. The breach, confirmed through an investigation with cybersecurity experts, revealed that a hacker had compromised the accounts between August 20, 2025, and September 11, 2025.
The exposed data may include names and financial account numbers of affected individuals. On March 6, 2026, the bank began notifying impacted customers via mail.
Edelson Lechtzin LLP, a national class action law firm, has launched an investigation into potential legal claims on behalf of those whose sensitive information was compromised. The firm specializes in data breach litigation and is evaluating options for affected parties.
Banner Capital Bank provides personal and business banking, mortgage lending, and wealth management services across its regional footprint. The incident underscores ongoing risks to financial institutions and their customers from cyber threats targeting employee email systems.
Banner Capital Bank cybersecurity rating report: https://www.rankiteo.com/company/bannercapitalbank
"id": "BAN1773117300",
"linkid": "bannercapitalbank",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Banking and Financial Services',
'location': 'Nebraska, Wyoming, USA',
'name': 'Banner Capital Bank',
'type': 'Commercial Bank'}],
'attack_vector': 'Compromised Employee Email Accounts',
'customer_advisories': 'Notification letters sent to affected customers',
'data_breach': {'personally_identifiable_information': 'Names, financial '
'account numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Financial data, personally '
'identifiable information'},
'date_detected': '2026-02-20',
'date_publicly_disclosed': '2026-03-06',
'description': 'Banner Capital Bank detected unauthorized access to an '
'employee’s email accounts, revealing that a hacker had '
'compromised the accounts between August 20, 2025, and '
'September 11, 2025. The exposed data may include names and '
'financial account numbers of affected individuals.',
'impact': {'data_compromised': 'Names and financial account numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation',
'payment_information_risk': 'High',
'systems_affected': 'Employee email accounts'},
'initial_access_broker': {'entry_point': 'Employee email accounts'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Banner Capital Bank Public Disclosure'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Edelson Lechtzin LLP'},
'response': {'communication_strategy': 'Customer notifications via mail',
'third_party_assistance': 'Cybersecurity experts'},
'title': 'Banner Capital Bank Data Breach Affecting Customer Financial Data',
'type': 'Data Breach'}