M&T Bank Data Breach

M&T Bank has recently disclosed a data breach involving a third-party service provider that compromised sensitive customer information. The breach, which occurred in August 2025, did not affect M&T Bank’s own systems but exposed personal information, including Social Security numbers and financial account details.

M&T Bank Data Breach Investigation

M&T Bank became aware of a security incident in August 2025 involving one of its third-party service providers. The breach occurred within the provider’s system, which contained M&T customer personal data, but did not impact M&T Bank’s own network or systems. Upon learning of the breach, M&T Bank immediately initiated a comprehensive review and worked closely with the third-party provider to assess the scope of the incident and determine the data affected.

After a thorough investigation, M&T Bank confirmed that certain files containing customer personal information may have been accessed by unauthorized individuals. The bank further clarified that the third-party provider has since securely removed the compromised data from its systems, reducing the risk of further exposure.

While M&T Bank’s systems remained secure, the breach exposed sensitive customer data, including Social Security numbers, financial account information, and credit/debit card numbers. This breach highlights the growing risks associated with third-party service providers, which are often targeted in cyberattacks due to the large volumes of sensitive data they manage.

M&T Bank’s commitment to protecting customer data remains strong, and the company has taken several steps to mitigate the risks for affected individuals. However, despite no evidence of misuse as of the notification date, the bank is offering credit monitoring services to help customers monitor their accounts for fraudulent activity.

When Did This Breach Occur?

• The breach occurred in August 2025
• The breach was discovered in August 2025
• Notification was sent on April 2026

What Information Was Breached?

According to M&T Bank’s notification, the following types of personal information may have been exposed:

• Social Security number (SSN)
• Financial account information
• Credit/debit card numbers

What You Can Do

If you received a notification from M&T Bank about this breach, it is essential to take proactive steps to protect your personal information, especially since sensitive data like Social Security numbers and financial account details were involved.

1. Enroll in Credit Monitoring: M&T Bank is offering complimentary credit monitoring services through Equifax Complete™ Premier for 24 months. This service will help detect any fraudulent activity on your credit report and assist in resolving any identity theft issues. Make sure to enroll in these services as you will not be automatically enrolled.
2. Monitor Your Accounts: Regularly review your financial account statements and credit card transactions for any suspicious or unauthorized activity. Early detection is critical to reducing potential damage.
3. Place a Fraud Alert or Credit Freeze: Consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion). Fraud alerts require creditors to verify your identity before granting credit in your name, while credit freezes prevent access to your credit file entirely.
4. Obtain Your Free Credit Report: You are entitled to one free credit report annually from each of the three major credit bureaus. Take advantage of this service and review your credit reports for any unfamiliar activity or discrepancies.
5. Stay Alert for Scams: Be cautious of unsolicited emails, phone calls, or messages asking for your personal information. Cybercriminals may use your exposed data to craft convincing scams.
6. Contact the Bank’s Toll-Free Call Center: If you have any questions or concerns regarding the breach or the credit monitoring services, M&T Bank has set up a dedicated toll-free call center to assist affected customers.

File a Data Breach Lawsuit Against M&T Bank

If your personal information was compromised in the M&T Bank data breach, you may have the right to pursue legal action. Organizations are required to safeguard sensitive customer data, and when they fail to do so, affected individuals may be eligible to recover compensation for damages such as identity theft, financial loss, and the time spent dealing with the breach.

Class action lawsuits provide a way for individuals affected by the same breach to join together and strengthen their ability to seek justice. By participating in a class action lawsuit, you can help push for stronger data protection measures and ensure that M&T Bank takes responsibility for its failure to protect your information.

You don’t have to go through this process alone. Many people are entitled to compensation but may not realize it. Understanding your legal rights is an important step toward protecting your interests and potentially recovering damages.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner, and no obligation after speaking with someone from our team.