Community Bank customer data exposed via unauthorized AI software

According to TechCrunch, Community Bank has disclosed a cybersecurity incident that resulted in the exposure of sensitive customer data, including names, dates of birth, and Social Security numbers, due to the use of an unauthorized artificial intelligence-based software application.

The bank, which serves customers in Pennsylvania, Ohio, and West Virginia, filed an 8-K with the U.S. Securities and Exchange Commission on May 7, detailing the incident. While the exact AI application and the number of affected customers were not specified, the filing suggests that an employee may have uploaded customer data to an online AI chatbot. This action potentially exposed the non-public information to the AI provider.

Community Bank is currently evaluating the extent of the data exposure and is in the process of notifying affected customers as required by law. This incident highlights the growing risks associated with the use of AI tools in handling sensitive customer information within the financial sector.

Source: TechCrunch