PeoplesBank Data Breach Affects 23,731 Individuals

PeoplesBank, a bank, disclosed a data breach stemming from a security incident at IDScan.net, a third-party service provider the bank uses for customer identification verification. The breach affected at least 23,731 people in Massachusetts.

On Sept. 8, 2026, IDScan.net informed PeoplesBank that it had identified unauthorized access to certain systems used to provide identity verification services.

The unauthorized access took place between April 2026 and September 2026.

PeoplesBank's records indicate that customers whose identification documents were scanned at a PeoplesBank banking center before September 2026 may have had their personal information exposed during this period, according to the notification.

Because the breach took place within IDScan.net's own systems rather than within PeoplesBank's internal infrastructure, the exposure was limited to customer data that had been transmitted to and stored by the third-party vendor as part of the identification verification process.

The types of personal information involved in the breach included full names, addresses, driver's license or state identification numbers and dates of birth.

PeoplesBank's response to the breach

PeoplesBank sent written notification letters to affected customers informing them of the incident and directing them to available identity protection resources. The company encouraged affected customers to review their account activity and credit reports for any signs of suspicious or unfamiliar activity.

IDScan.net is offering complimentary credit monitoring and identity protection services to individuals whose personal information may have been compromised in the breach.

Affected individuals who wish to learn more about these services or enroll can visit IDScan.net's dedicated notification page or call 1-833-516-2980 for assistance. The phone line is staffed Monday through Friday from 8 a.m. to 8 p.m. ET, excluding holidays.