The Citizens Bank Data Breach: What Happened and Who Was Affected
In June 2025, The Citizens Bank, a South Carolina-based community bank with 19 locations across the Pee Dee, Midlands, Coastal, and Low Country regions, disclosed a data breach exposing sensitive customer information. The incident was detected on June 13, 2025, after suspicious activity was identified in the bank’s email environment.
A forensic investigation revealed that unauthorized access to certain files occurred—or may have occurred—between June 12 and June 14, 2025. The breach compromised a range of personally identifiable information (PII), including:
- Social Security numbers
- Financial account and payment card details
- Driver’s license and passport numbers
- Taxpayer identification numbers
- Medical information
The bank, which employs just 43 staff members, is offering complimentary credit monitoring services to affected individuals. Law firm Shamis & Gentile P.A. has launched an investigation into the breach, indicating potential legal action for those impacted.
While no specific threat actor or motive has been confirmed, the exposure of such sensitive data heightens risks of identity theft, financial fraud, and unauthorized account access. Affected customers are advised to monitor their accounts, review credit reports, and consider placing fraud alerts or credit freezes to mitigate further risks.
The breach underscores the ongoing vulnerabilities in financial institutions, even among smaller, community-based banks. Further details on the scope of the incident and potential legal recourse remain under review.
Source: https://www.claimdepot.com/investigations/the-citizens-bank-data-breach-2025
First Palmetto Bank cybersecurity rating report: https://www.rankiteo.com/company/first-palmetto-bank
"id": "FIR1765865190",
"linkid": "first-palmetto-bank",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'South Carolina, USA',
'name': 'The Citizens Bank',
'size': '43 employees',
'type': 'Bank'}],
'attack_vector': 'Email Environment Compromise',
'customer_advisories': 'Yes',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security number',
'Financial account information',
'Payment card information',
'Driver’s license number',
'Taxpayer identification number',
'Medical information',
'Passport number']},
'date_detected': '2025-06-13',
'description': 'In June 2025, The Citizens Bank discovered a data breach that '
'put sensitive customer information at risk. The bank detected '
'suspicious activity within its email environment on June 13, '
'2025. An investigation revealed that certain files were or '
'may have been accessed without authorization between June 12 '
'and June 14, 2025.',
'impact': {'data_compromised': 'Sensitive personally identifiable information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Email environment'},
'investigation_status': 'Ongoing',
'recommendations': ['Monitor account statements and credit reports',
'Place a fraud alert on credit file',
'Consider a credit freeze',
'File a report with law enforcement and the Federal Trade '
'Commission',
'Enroll in complimentary credit monitoring services'],
'references': [{'source': 'Shamis & Gentile P.A.'}],
'response': {'communication_strategy': 'Customer advisories issued',
'third_party_assistance': 'Third-party forensic specialists'},
'title': 'The Citizens Bank Data Breach',
'type': 'Data Breach'}