West Florida Banking Corporation Hit by Data Breach Affecting Nearly 4,000 Customers
West Florida Banking Corporation, the parent company of Flagship Bank, is under investigation following a data breach that exposed sensitive personal and financial information of 3,996 individuals across the U.S. The breach, discovered on May 7, 2025, stemmed from a social engineering attack that granted unauthorized access to the bank’s network on April 15, 2025.
Based in Clearwater, Florida, West Florida Banking Corporation operates seven branches in the Tampa-St. Petersburg-Clearwater area, serving commercial and community banking clients. The company secured its systems upon detection, notified federal law enforcement, and reported the incident to state regulators on February 13, 2026. Affected individuals including residents of Maine, New Hampshire, and Rhode Island were later notified via written notices.
The breach compromised names, Social Security numbers, and financial account information. As a remedial measure, the bank is providing 12 months of complimentary credit monitoring through TransUnion for impacted customers.
A class action law firm is now investigating potential compensation claims for those affected, citing damages related to identity protection and financial losses. The incident highlights the growing threat of social engineering in financial sector cyberattacks.
Source: https://www.claimdepot.com/investigations/west-florida-bank-data-breach-2026
Flagship Bank TPRM report: https://www.rankiteo.com/company/flagship-bank-florida
"id": "fla1771274335",
"linkid": "flagship-bank-florida",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '3996',
'industry': 'Financial Services',
'location': 'Clearwater, Florida, USA',
'name': 'West Florida Banking Corporation',
'type': 'Bank'}],
'attack_vector': 'Social Engineering',
'customer_advisories': 'Written notices sent to affected individuals',
'data_breach': {'number_of_records_exposed': '3996',
'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High (Social Security numbers, '
'financial account information)',
'type_of_data_compromised': 'Personal and financial '
'information'},
'date_detected': '2025-05-07',
'date_publicly_disclosed': '2026-02-13',
'description': 'West Florida Banking Corporation, the parent company of '
'Flagship Bank, is under investigation following a data breach '
'that exposed sensitive personal and financial information of '
'3,996 individuals across the U.S. The breach stemmed from a '
'social engineering attack that granted unauthorized access to '
'the bank’s network.',
'impact': {'data_compromised': 'Names, Social Security numbers, financial '
'account information',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation',
'payment_information_risk': 'High'},
'initial_access_broker': {'entry_point': 'Social engineering attack'},
'investigation_status': 'Under investigation (class action law firm)',
'post_incident_analysis': {'root_causes': 'Social engineering attack'},
'references': [{'source': 'Cyber Incident Report'}],
'regulatory_compliance': {'legal_actions': 'Reported to state regulators',
'regulatory_notifications': 'Yes'},
'response': {'communication_strategy': 'Written notices to affected '
'individuals',
'containment_measures': 'Systems secured upon detection',
'law_enforcement_notified': 'Federal law enforcement',
'remediation_measures': '12 months of complimentary credit '
'monitoring for impacted customers',
'third_party_assistance': 'TransUnion (credit monitoring)'},
'title': 'West Florida Banking Corporation Data Breach',
'type': 'Data Breach'}