Orrstown Financial Services
Disclosed May 29, 20263 months agoConfirmed
Cybersecurity incident disclosed to the SEC (8-K Item 8.01)
(b) On May 21, 2026, the Company received notice from a third-party vendor that such vendor had experienced a cybersecurity incident whereby a third-party gained unauthorized access to sensitive personal information of certain of the Company's customers. The Company is one of a number of organizations that have been affected by this vendor's cybersecurity incident. Based on the Company's investigation to date, the Company's information systems and networks have not been accessed, compromised or affected by the incident. The vendor has informed the Company that there is currently no indication
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 29, 2026 |
| Attack | Vendor breach |
| Data exposed | Not stated |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Orrstown Financial Services Inc Form 8-K, Item 8.01 (2026-05-29)sec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| SEC 8-K 8.01total | May 29 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (SEC 8-K 8.01), confirmed by SEC 8-K 8.01. Record counts are as reported. Not legal advice.