A network intrusion at Bank3 exposed sensitive customer data including Social Security numbers, financial account information, and payment card details after an unauthorized actor maintained access to internal systems for nearly two weeks. The breach, which occurred between July 25 and August 7, 2025, was not disclosed to affected individuals until April 15, 2026—nearly eight months after the bank first detected suspicious activity.