Citizens Bank citizensbank.com Citizens Bank data breach 2026: what happened and what to do
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
Citizens Bank says that on September 10, 2026 it found that an unauthorized party had accessed some customer data: names, Social Security numbers, dates of birth, phone numbers and email addresses. It offers two years of Equifax credit monitoring.
View all 13,118 breaches- Breach date
- 10 Sept 2026
- Made public
- 19 Oct 2026
- Data exposed
- Names, Social security numbers, Dates of birth, Phone numbers, Email addresses
- Last updated
What happened
Citizens Bank told customers in a notification letter that on September 10, 2026, it identified an issue that allowed some data to be accessed by an unauthorized third party. The letter was filed with the California Attorney General in October 2026.
What was exposed
The letter lists five things: name, Social Security number, date of birth, phone number and email address. It does not say how many people were affected, how the access happened or how long it lasted.
What that lets criminals do
A name, Social Security number and date of birth together are what identity thieves need to open credit in someone else's name, file a fraudulent tax return or take over an existing account. A phone number and email address make the follow-up easy: a scammer can call or text while quoting details that sound legitimate. Expect messages that claim to be from Citizens Bank and ask you to "verify" something.
What Citizens says it is doing
The bank says it found no evidence that any customer data was examined or used maliciously and that the issue has been fully remediated. It is offering a complimentary two-year membership in Equifax Credit Watch Gold, which includes credit monitoring, identity restoration help and identity theft insurance of up to $1,000,000 for certain out-of-pocket costs. The letter asks customers to watch account statements and credit history and to report suspicious activity to the bank. Customers can call 1-866-950-8157 with questions.
Earlier incident
This is separate from the incident Citizens disclosed earlier in 2026. This page covers only the September 2026 notice.
What the Equifax offer includes
Per the enclosed sheet, Equifax Credit Watch Gold sends email notifications of key changes to your Equifax credit report, gives daily access to that report and sends alerts when personal details such as a Social Security number or card number turn up on fraudulent internet trading sites. It also adds automatic fraud alerts, which ask lenders to take extra steps to verify your identity, and an identity restoration specialist if you become a victim. You must be over 18 with a credit file to use it, and you enroll with the activation code printed in your letter.
Why a Social Security number is the hard part
You can change a password in a minute. You can't change a Social Security number or a date of birth, so the exposure lasts for years. Monitoring tells you when something happens. A credit freeze prevents the most common misuse, new credit opened in your name, before it happens. Because the letter says nothing about how long the access lasted or how many people were involved, the safest assumption is that your data is out there and to act as if it were.
Who is affected
Citizens filed a sample of the letter, addressed "Dear Valued Customer". The bank hasn't said which customers received it. If you hold or held an account with Citizens and a letter arrives, read it and act on it rather than assuming it is junk mail. If none arrives, there's no confirmed exposure, but the steps below cost nothing.
Sources checked: oag.ca.gov
Last verified against the official page:
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze stops new accounts from being opened with your Social Security number. It's free and takes a few minutes each at Equifax, Experian and TransUnion. You can lift it when you need credit.
- 2
Sign up for the free Equifax monitoring
If you got the Citizens letter, use the activation code in it at equifax.com/activate. The offer covers two years.
- 3
Read your statements and credit reports
Look for transactions and accounts you don't recognize, and report anything to Citizens at once. You can pull free credit reports at annualcreditreport.com.
- 4
Treat messages that mention Citizens as suspect
Your phone number and email address were in the exposed data. Don't click links in texts or emails about your account. Call the number on the back of your card instead.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data shows up, so you hear about it before a scammer uses it.
Official filings
- California Attorney General , filed 19 Oct 2026
Timeline
-
The breach happened
-
The company made it public
-
Reported to the California Attorney General
Frequently asked
Was I affected by the Citizens Bank breach?
Citizens is sending letters to the people it believes were affected. If you got one, you were. The bank hasn't published the number of people involved.
What was exposed?
According to the notification letter: name, Social Security number, date of birth, phone number and email address.
Were passwords or account numbers exposed?
The letter doesn't list passwords or account numbers. It names only the five items above.
Should I change my password?
The letter doesn't mention passwords, but changing your online banking password and turning on two-factor authentication is cheap and worth doing after any bank notice.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
