BNY Mellon Discloses Data Breach Affecting Employee Profit Sharing Plan Participants BNY Mellon National Association, a nationally chartered bank and affiliate of The Bank of New York Mellon Corp., reported a data breach impacting participants in its employee Profit Sharing Plan (PSP). The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation, with 15 Massachusetts residents confirmed as affected. The incident was detected on March 10, 2026, and notification letters were sent to impacted individuals beginning April 1, 2026. The breach involved unauthorized access to an internal system used to manage the PSP, which contained sensitive personal and financial data. While BNY Mellon’s investigation found no evidence of data modification by the threat actor, it could not confirm whether the information was viewed. Potentially exposed data includes names, Social Security numbers, home addresses, bank account and routing numbers, and PSP payment details. In response, BNY Mellon is offering 24 months of free identity theft protection through IDX, including credit monitoring, CyberScan monitoring, PII removal, a $1 million insurance reimbursement policy, and identity recovery services. Affected individuals must enroll by October 1, 2026, using a unique code provided in their notification letters. Support is available via a dedicated phone line at 1-800-418-0273.