Citizens Bank Data Breach Exposes Customer Information in Vendor-Related Incident
Citizens Bank, NA, a major U.S. financial institution and subsidiary of Citizens Financial Group, recently disclosed a data breach affecting hundreds of customers. The incident, reported to the Massachusetts Attorney General on April 28, 2026, stemmed from a security compromise in a third-party vendor’s systems, leading to the exposure of sensitive customer data.
The breach impacted 428 individuals in Massachusetts, with exposed information including names, addresses, and financial account numbers specifically those printed on checks. Citizens Bank, founded in 1828 and headquartered in Providence, Rhode Island, offers retail and commercial banking services nationwide.
Class action law firm Shamis & Gentile P.A. is investigating the breach and potential compensation for affected customers. The incident highlights ongoing risks tied to third-party vendor vulnerabilities in the financial sector.
Source: https://www.claimdepot.com/investigations/citizens-bank-data-breach-2026
Citizens Financial Group TPRM report: https://www.rankiteo.com/company/rbs-citizens-financial-group
"id": "rbs1777501640",
"linkid": "rbs-citizens-financial-group",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '428 (Massachusetts only)',
'industry': 'Banking',
'location': 'Providence, Rhode Island, USA',
'name': 'Citizens Bank, NA',
'size': 'Large',
'type': 'Financial Institution'}],
'attack_vector': 'Third-party vendor compromise',
'data_breach': {'number_of_records_exposed': '428 (Massachusetts only)',
'personally_identifiable_information': 'Names, addresses, '
'financial account '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII), Financial '
'Data'},
'date_publicly_disclosed': '2026-04-28',
'description': 'Citizens Bank, NA, a major U.S. financial institution and '
'subsidiary of Citizens Financial Group, recently disclosed a '
'data breach affecting hundreds of customers. The incident '
'stemmed from a security compromise in a third-party vendor’s '
'systems, leading to the exposure of sensitive customer data, '
'including names, addresses, and financial account numbers '
'printed on checks.',
'impact': {'data_compromised': 'Names, addresses, financial account numbers '
'(printed on checks)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing (class action investigation)',
'post_incident_analysis': {'root_causes': 'Third-party vendor security '
'compromise'},
'references': [{'source': 'Massachusetts Attorney General'},
{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.',
'regulatory_notifications': 'Reported to '
'Massachusetts Attorney '
'General'},
'response': {'communication_strategy': 'Disclosure to Massachusetts Attorney '
'General'},
'title': 'Citizens Bank Data Breach Exposes Customer Information in '
'Vendor-Related Incident',
'type': 'Data Breach'}