Data Breach

BayFirst Financial Data Breach Lawsuit Investigation

If you were affected by the BayFirst Financial Corp. data breach, you may be entitled to compensation.
Updated on
Published on
BayFirst Financial Data Breach Lawsuit Investigation
BayFirst Financial Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the BayFirst Financial Corp. data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About BayFirst Financial

BayFirst Financial is a financial holding company based in St. Petersburg, Florida. Through its subsidiary, BayFirst National Bank, it offers a range of personal and business banking services to individuals, families and small businesses in the Tampa Bay region.

The company is known for its active participation in Small Business Administration (SBA) and USDA lending programs and is among the top SBA 7(a) lenders in the United States.

What Happened?

In August 2025, BayFirst was impacted by a data breach involving a third-party marketing services provider, Marquis Software Solutions. On Aug. 14, 2025, Marquis detected suspicious activity on its network and later confirmed it was the victim of a ransomware attack.

On Oct. 28, 2025, Marquis confirmed that some customer information from BayFirst National Bank was exposed.

Possible Information Exposed

  • Names
  • Addresses
  • Dates of birth
  • Social Security numbers or taxpayer identification numbers
  • Financial information

The cybersecurity incident was disclosed to the Maine Attorney General on Dec. 2, 2025. Impacted customers will be notified directly and offered complimentary credit monitoring and identity theft protection services.

Your Rights and Next Steps

If you received a notification about this breach, it means your personal information could have been exposed. Even if there is no evidence of misuse so far, it is important to take steps to protect yourself. Lawyers are ready to help individuals who may be at risk due to this incident.

Here are some actions you can take:

  • Enroll in the complimentary Epiq Privacy Solutions ID credit monitoring and identity theft protection services being offered
  • Monitor credit reports and account statements for any unauthorized activity
  • Consider placing a fraud alert or security freeze on credit reports to prevent new accounts from being opened in your name
  • Stay vigilant for signs of identity theft or fraud over the next 12 to 24 months

You also have the right to seek compensation if your information was compromised as a result of this breach. Legal action may be available to help recover losses or damages related to the exposure of your personal data.

You May Be Entitled to Compensation

If you were affected by the BayFirst data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.

Data breach laws provide protections and remedies for individuals whose sensitive information is compromised due to a company’s failure to safeguard data. To find out if you qualify and to join a lawsuit, complete the form below.

Sources

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION