Florence Bank Data Breach: Customer SSNs in a Massachusetts Filing

A Florence Bank notification letter appears among the data breach notification letters recorded by the Massachusetts Office of Consumer Affairs and Business Regulation in July 2026.

If you received a letter, it is the authoritative account of what happened to your information and when.

Reporting on the Massachusetts filing indicates that the categories of personal information involved included name, address, date of birth, Social Security number, and driver’s license number.

A Social Security number paired with a date of birth and a driver’s license number can supply much of what is needed to open fraudulent accounts, file false tax returns, or assume someone’s identity. Unlike a debit card, none of those identifiers can simply be cancelled and reissued.

Reporting on the filing indicates that Florence Bank offered affected customers 18 months of identity theft protection on a reimbursement basis — meaning customers could select a provider of their choosing and be reimbursed by the bank, rather than being enrolled in a single designated service. Coverage described in that reporting includes reimbursement for services from providers such as LifeLock or Experian.

This structure differs from the more common approach of enrolling everyone in one provider’s product, and it places the initial step on the customer. The letter describes the reimbursement as 100% for 18 months but does not explain how to claim it, so keep receipts for any service you buy.

When a financial institution does not publicly disclose when an incident occurred or when it was discovered, affected customers are left without important context. The interval between an intrusion and notification determines how long information may have been circulating without a customer’s knowledge, and how long that customer went without the chance to freeze their credit or watch for fraud.

Massachusetts law generally requires notice to affected residents without unreasonable delay following discovery of a breach of security. Customers may reasonably want to know how long their Social Security numbers were exposed before they were told.

For another incident involving Social Security numbers, see our overview of the MBE CPAs data breach lawsuit.

Banks are entrusted with sensitive categories of customer information and are subject to obligations under Massachusetts data security regulations, the Gramm-Leach-Bliley Act, and related federal rules. If your information was involved in the Florence Bank data breach, you may be entitled to compensation for:

• The unauthorized exposure of your Social Security number and government identification information
• Costs associated with credit monitoring, credit freezes, and identity protection
• Actual financial losses resulting from identity theft, new account fraud, or tax fraud
• Emotional distress caused by the exposure of your personal information
• Harm associated with any delay in receiving notice of the incident

If you received a notification letter from Florence Bank, Wilshire Law Firm wants to hear from you. Our legal professionals can review your situation and help you understand your options at no cost.

There are no fees unless you get paid.

Contact us online to speak with a legal professional today.