Citizens Bank Notifies Customers After Unauthorized Third-Party Access to Personal Data

What the notice says

Citizens Bank notified customers through a filing with the California Attorney General, reported 2026-10-19, that personal information was accessed by an unauthorized third party. The notice as filed states that the information involved included name, Social Security number, date of birth, phone number and email address

Citizens Bank states it became aware of the activity on September 10, 2026. The notice describes the discovery this way: The notice adds that no evidence of misuse was found, stating

As a response, Citizens Bank is offering a complimentary two-year membership in an identity theft credit monitoring service, described as . Affected individuals are also directed to review account statements, place fraud alerts, and consider a security freeze.

What the notice leaves open

The notice as filed does not state how many individuals were affected, how the unauthorized third party gained access, or the method used to obtain the information. It also does not specify a separate window for when the unauthorized activity itself occurred, only the date Citizens Bank says it identified the issue. cisonews.net could not locate further detail on these points in the notice as filed.