PNC Bank experienced a data breach that exposed personally identifiable information (PII) belonging to bank customers. According to the bank's disclosure, client information was improperly provided to another client without authorization.
Compromised information includes names, addresses, Social Security numbers and account numbers. PNC Bank began notifying impacted customers by mail on Sept. 10, 2025. The total number of affected individuals has not been released.
However, the incident may have broader implications, as a threat actor using the alias “Market Exchange” claimed on Sept. 7, 2025, to be selling data allegedly stolen from PNC Financial Services on a dark web marketplace hosted on the Tor network. The cybercriminal asserted that the compromised dataset includes 740,000 records containing names, email addresses, account types, and phone numbers.
The data breach was also disclosed to the Massachusetts Attorney General's office on Sept. 16, 2025. While the dark web posting suggests a much larger dataset may have been exposed, only the accidental internal disclosure has been confirmed by PNC Financial Services.
In response to the breach, PNC Financial Services placed alerts on the affected accounts, which will remain active for six months. These alerts require additional authentication for any transactions conducted in a branch or through the Customer Care Center. The bank is also offering one year of free Experian IdentityWorks credit monitoring services to impacted account holders.
If you receive a notice from PNC Bank about this breach, or believed your account information may have been compromised, you may want to:
For more information about PNC Financial Services, visit the company’s website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.