SouthState Bank isolates parts of its network after a February 2024 cybersecurity incident

SouthState Corporation, the Florida-based bank holding company, reported on February 9, 2024 that its subsidiary SouthState Bank detected a cybersecurity incident on February 6. The bank cut off parts of its network to stop the activity, which disrupted some internal processes.

First filing

SouthState said isolating parts of the network caused some disruption to its business processes while operations continued in all material respects. It notified banking regulators and law enforcement and hired a cybersecurity firm.

March 2024 amendment

The 8-K/A of March 29, 2024 reported the incident contained and said the bank would write to people whose personal information may have been involved. The amendment described a significant effect on certain business processes but concluded the incident was not reasonably likely to be material to SouthState's finances.

Not disclosed

SouthState's filings do not describe the type of attack, the number of people receiving letters, or the categories of personal information involved.