Sound Community Bank, a Seattle-based community bank, recently disclosed a data breach that affected the personal information of more than 5,500 individuals. According to the notice, personally identifiable information (PII) of customers may have been exposed. On Aug. 14, 2025, this vendor experienced a cybersecurity incident that led to unauthorized access of sensitive consumer data. After investigating the breach, the vendor notified Sound Community Bank on Oct. 27, 2025, that client information may have been compromised. So far, the breach has impacted at least 5,503 people in Washington and four in Massachusetts, according to filings with the respective state attorney general offices. The exposed information includes names, Social Security numbers, full dates of birth, and financial account numbers. This data is considered personally identifiable information (PII) and is highly sensitive, as it can be used for identity theft or financial fraud. Beginning on Oct. 29, 2025, the bank disclosed the cyber security breach to the Attorney General's offices in Massachusetts and Washington. Sound Community Bank’s response In response to the incident, Sound Community Bank has taken several steps to address the breach and protect its clients. The bank is actively working with the vendor to obtain additional information about the breach and is reviewing the vendor’s security practices. They have also notified law enforcement and engaged cybersecurity experts to assist with the i

On July 17, 2023, the Maine Office of the Attorney General reported that Sound Community Bank experienced a potential data breach involving an external system breach (hacking) affecting 14,686 individuals, including 3 residents specifically. The breach occurred due to a vulnerability in the MOVEit file transfer tool between April 3, 2023, and May 31, 2023, potentially exposing sensitive banking information, including Social Security numbers.