PNC Financial Services Data Breach Affects Customer PII

Published
September 17, 2025
Updated
September 17, 2025
PNC Financial Services Data Breach Affects Customer PII
PNC Bank
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

PNC Bank

data breach?

Join the Lawsuit

It's free to join. 

Banner advertisement for ExpressVPN to take control of your online security

Claim Depot may receieve a commission from links on this page

PNC Bank experienced a data breach that exposed personally identifiable information (PII) belonging to bank customers. According to the bank's disclosure, client information was improperly provided to another client without authorization.

Compromised information includes names, addresses, Social Security numbers and account numbers. PNC Bank began notifying impacted customers by mail on Sept. 10, 2025. The total number of affected individuals has not been released.

However, the incident may have broader implications, as a threat actor using the alias “Market Exchange” claimed on Sept. 7, 2025, to be selling data allegedly stolen from PNC Financial Services on a dark web marketplace hosted on the Tor network. The cybercriminal asserted that the compromised dataset includes 740,000 records containing names, email addresses, account types, and phone numbers.

The data breach was also disclosed to the Massachusetts Attorney General's office on Sept. 16, 2025. While the dark web posting suggests a much larger dataset may have been exposed, only the accidental internal disclosure has been confirmed by PNC Financial Services.

PNC Financial Services’ response

In response to the breach, PNC Financial Services placed alerts on the affected accounts, which will remain active for six months. These alerts require additional authentication for any transactions conducted in a branch or through the Customer Care Center. The bank is also offering one year of free Experian IdentityWorks credit monitoring services to impacted account holders.

If you receive a notice from PNC Bank about this breach, or believed your account information may have been compromised, you may want to:

  • Sign up for the free credit monitoring services, offered by the bank.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

For more information about PNC Financial Services, visit the company’s website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image