Citizens Bank

An unauthorized party reached a Citizens Bank system holding names, Social Security numbers, birthdates, phone numbers, and email addresses, an intrusion the bank identified on September 10, 2026. The notice names no entry point, no actor, and no count of customers affected, although independent reports suggest as many as 14,000 in Texas alone. Whatever door was used, one system held the complete kit for impersonating a customer, and that concentration was the design choice. No evidence of misuse so far dismisses the reality of faciliating social enginnering attacks in the future.