Bank3 Data Breach Exposes Sensitive Customer Information in 2025 Cyberattack Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Bank3, a regional commercial bank headquartered in Memphis, Tennessee, with branches across West Tennessee and DeSoto County, Mississippi. On August 20, 2025, Bank3 detected suspicious activity on its network and immediately secured its systems. A subsequent investigation, conducted with third-party forensic specialists, revealed that an unauthorized actor accessed the bank’s systems between July 25 and August 7, 2025, viewing or exfiltrating sensitive data. The ransomware group Qilin claimed responsibility for the breach, posting details on the dark web on October 13, 2025. The group alleged it had stolen 149 GB of data, including personal and financial information for all clients, as well as internal financial records. Bank3 completed its review of the compromised data and began notifying affected individuals via written notice on April 15, 2026. The exposed information included: - Names - Social Security numbers - Dates of birth - Driver’s license or state ID numbers - Financial account and payment card details - Taxpayer identification numbers - Health insurance information The bank also reported the incident to federal law enforcement and state regulators. Legal representatives are now evaluating potential compensation claims for impacted customers.