Heritage Bank Data Breach Exposes Sensitive Customer and Employee Information On March 2, 2026, Heritage Bank detected unauthorized activity within its network, revealing that an attacker had copied files from an internal employee file share server the previous day. The compromised server contained sensitive personally identifiable information (PII) belonging to both customers and employees. Exposed data included account numbers, Social Security numbers (or ITINs), dates of birth, and addresses. The breach was discovered following an internal investigation, though the full scope of the incident remains under review. Shamis & Gentile P.A., a law firm specializing in data breach class actions, is investigating potential legal claims for affected individuals. Those impacted may be eligible for compensation under consumer protection laws. The firm has encouraged individuals who received a breach notice or suspect their data was exposed to explore their legal options.