Colonial Presbyterian Church, a religious organization based in Kansas City, Missouri with campuses in Overland Park, Kansas and South Kansas City, has notified individuals that a cybersecurity incident may have exposed their personal and financial information. Organizations that collect and store financial account details are entrusted with protecting that information, and when that trust is broken, the people whose data was exposed deserve clear answers and a path toward protection.
Colonial Presbyterian Church’s Data Breach Investigation
According to a notice filed with the Massachusetts Attorney General’s office, Colonial Presbyterian Church (“CPC”) detected suspicious activity within its computer network on April 1, 2026. Upon discovering the activity, CPC disconnected access to the affected network and engaged a specialized third-party cybersecurity firm to help secure its systems and conduct a forensic investigation into the nature and scope of the incident.
The forensic investigation found evidence that files belonging to CPC had been acquired by an unauthorized user. Following this discovery, CPC reviewed the scope of the impacted data to identify which individuals were affected and what categories of information were involved. CPC finalized its list of affected individuals on July 30, 2026, and began sending written notification letters shortly after.
Since discovering the incident, CPC has taken a number of steps to respond, including disconnecting network access, changing administrative credentials, restoring operations in a secure mode, and enhancing its security measures going forward. CPC is also offering affected individuals complimentary access to credit monitoring, credit report, and credit score services through HaystackID for 24 months at no cost.
Data breaches involving financial account and routing numbers carry a heightened risk of direct financial fraud, distinct from breaches limited to more general identifying information. When an organization holding banking details for its congregation or clients fails to adequately safeguard that information, those affected may have legal options to pursue accountability and compensation for the harm caused.
When Did This Breach Occur?
Colonial Presbyterian Church detected the suspicious network activity on April 1, 2026. The organization’s investigation concluded on July 30, 2026, when it finalized the list of individuals whose information was involved, and notification letters dated August 5, 2026 were subsequently mailed to affected individuals.
What Information Was Breached?
Colonial Presbyterian Church’s notice states that the following categories of information may have been affected, though the specific data elements involved may vary by individual: name, address, financial account number, and routing number. The exposure of banking account and routing numbers in particular raises concerns about unauthorized financial transactions and fraud targeting affected individuals’ accounts.
What You Can Do
Colonial Presbyterian Church is offering affected individuals 24 months of complimentary Single Bureau Credit Monitoring, Single Bureau Credit Report, and Single Bureau Credit Score services through HaystackID, accessible via Equifax’s enrollment portal. Affected individuals should enroll within 90 days of the notification letter’s date to take advantage of this offer.
In addition to enrolling in the monitoring services offered, affected individuals are encouraged to:
- Regularly review bank and financial account statements for unauthorized transactions
- Contact their financial institution directly to discuss protective measures for exposed account and routing numbers
- Consider placing a fraud alert or credit freeze with the three major credit bureaus
- Obtain a free credit report at annualcreditreport.com to check for suspicious activity
- Remain alert to phishing emails or phone calls referencing this incident
File a Data Breach Lawsuit Against Colonial Presbyterian Church
If you received a data breach notification letter from Colonial Presbyterian Church, you may be entitled to compensation for the exposure of your personal and financial information. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach or believe your information was compromised, don’t wait to explore your legal options.
