Farmers Bank & Trust data breach investigation

Investigation notes

Farmers Bank & Trust serves as a foundational financial institution within its operating regions, delivering essential banking services such as retail and commercial checking accounts, loans, mortgages, wealth management, and treasury solutions. Because of the critical financial role it plays, the institution routinely gathers, processes, and stores vast quantities of highly sensitive personally identifiable information (PII) and financial records for thousands of consumers, families, and local businesses. This repository of high-value data makes financial institutions prime targets for cybercriminals seeking to exploit digital vulnerabilities for illicit monetary gain.

In 2025, Farmers Bank & Trust formally reported a data security incident to the Maryland Attorney General, signaling that unauthorized actors may have gained access to its network environment or digital databases. While the exact vector of the breach remains under active investigation, security incidents of this nature within the banking sector frequently involve sophisticated ransomware deployments, credential harvesting, or compromised third-party vendor systems. Financial networks house interconnected legacy infrastructure alongside modern cloud applications, creating complex attack surfaces that require rigorous, continuous monitoring to prevent unauthorized intrusion.

The exposure resulting from this incident potentially compromises a devastating combination of sensitive data categories, including full legal names, Social Security numbers, dates of birth, financial account numbers, routing numbers, and login credentials. When leaked, this information exposes victims to severe, long-term risks such as bank account takeover, unauthorized wire transfers, fraudulent credit card applications, and complex tax identity theft. Unlike a compromised password that can be easily reset, foundational identifiers like Social Security numbers and bank routing details remain permanently tied to an individual's financial identity, leaving victims vulnerable to ongoing exploitation for years.

As a financial institution handling consumer funds and private records, Farmers Bank & Trust is bound by stringent regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable Maryland state data protection laws. The GLBA mandates that financial institutions implement robust administrative, technical, and physical safeguards to protect nonpublic personal information from unauthorized access or disclosure. The occurrence of a data breach of this magnitude serves as a strong indicator that established security protocols may have failed, raising serious questions regarding whether the institution met its legal duty of care to protect consumer data.

Receiving a data breach notification letter from Farmers Bank & Trust is more than just an inconvenience—it is formal notification that your private financial data was compromised due to corporate negligence, and it establishes the legal standing necessary to participate in a class action lawsuit. Affected individuals do not need to wait until they experience actual financial loss or fraudulent activity to take legal action; the increased risk of future identity theft alone is recognized under the law. Our firm is currently investigating potential legal claims against Farmers Bank & Trust on a contingency fee basis, meaning there are never any out-of-pocket costs or upfront fees, and we only collect compensation if we successfully recover damages on your behalf.