The Maine Office of the Attorney General reported that Simmons Bank experienced a data breach on September 21, 2022, due to an external system breach (hacking) involving its vendor, AMS Collaborator. Approximately 3,215 individuals were affected, with the type of compromised information including Social Security numbers.

The California Office of the Attorney General disclosed a data breach affecting Simmons Bank on November 15, 2022, stemming from a cybersecurity incident involving one of the bank’s third-party vendors. The breach, which occurred on September 21, 2022, exposed sensitive customer information, including names, addresses, Social Security numbers (SSNs), and driver’s license numbers. While the exact number of affected individuals remains undisclosed, the compromised data poses significant risks, such as identity theft, financial fraud, and unauthorized access to personal accounts. The incident highlights vulnerabilities in the bank’s vendor ecosystem, raising concerns about supply chain security and the protection of customer data. Given the nature of the exposed information—particularly SSNs and driver’s license numbers—the breach could lead to long-term repercussions for affected customers, including potential credit damage, phishing attacks, or fraudulent activities under their identities. Simmons Bank has not publicly detailed the specific attack vector (e.g., phishing, malware, or system exploitation), but the involvement of a vendor suggests a possible exploitation of weak access controls or unpatched vulnerabilities within the third-party’s infrastructure. Regulatory scrutiny and potential legal consequences may follow, as financial institutions are subject to strict data protection laws (e.g., GLBA, CCPA). Customers are advised to monitor their accounts, enable fraud alerts, and consider credit freezes to mitigate risks. The breach underscores the critical need for robust vendor risk management and proactive cybersecurity measures to prevent similar incidents in the future.

The Maine Office of the Attorney General reported that Simmons Bank experienced a data breach due to an external system breach (hacking) discovered on July 5, 2022, and affecting 3,315 individuals. The breach involved access to financial account numbers but did not compromise Social Security numbers, and notification letters were sent to affected individuals on December 7, 2022.