Columbia Bank data breach
Columbia Bank has formally reported a data security incident to the Washington Attorney General's office on April 17, 2026. This breach involved the exposure of sensitive customer data, prompting an ongoing investigation into the extent of the compromise. Individuals who received a notification letter should understand their rights and consider seeking a free review of their case.
Docket sheet
- Company
- Columbia Bank
- Venue
- Washington Attorney General
- Filed
- April 17, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Washington Attorney GeneralApril 17, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Financial Account Number
- Routing Number
- Date of Birth
- Address History
- Credit Score Information
- Transaction History
Clerk's notes
On April 17, 2026, Columbia Bank, a prominent financial institution serving the Pacific Northwest, filed a data breach report with the Washington Attorney General's office. This formal notification indicates a significant security incident has occurred, impacting the sensitive personal and financial data entrusted to the bank by its customers. The investigation into the incident is currently in a monitoring status, meaning regulators are actively overseeing the situation.
The breach exposed a range of critical data categories. Affected individuals may have had their Full Name, Social Security Number, Financial Account Number, Routing Number, Date of Birth, Address History, Credit Score Information, and Transaction History compromised. Such information, when accessed by unauthorized parties, can lead to serious risks including identity theft and financial fraud.
The exposure of these specific data types carries substantial consequences. With Financial Account Numbers and Routing Numbers, alongside identifiers like Full Name and Social Security Number, malicious actors could potentially attempt to gain unauthorized access to accounts, initiate fraudulent transactions, or open new lines of credit under a victim's identity. This necessitates ongoing vigilance from affected individuals to protect their financial security.
Financial institutions like Columbia Bank are held to strict standards for protecting customer data under federal and state laws, including the Gramm-Leach-Bliley Act and the Washington Consumer Protection Act. Receiving a data breach notification letter from Columbia Bank serves as official confirmation that your information was involved in this security incident. Such a letter provides you with legal standing to understand your options.
If you have received a data breach notification from Columbia Bank, it is important to understand what steps you can take. Our firm is currently investigating potential claims related to this incident. You are welcome to request a free case review to discuss the specific details of your situation and learn more about your potential rights without any out-of-pocket cost.
If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.
Other Washington docket entries
- Hands On Children’s MuseumWashington AGNovember 5, 2026Monitoring
- DreamHost, LLCWashington AGNovember 4, 2026Monitoring
- Frontline EducationWashington AGOctober 27, 2026Monitoring
- JM Bullion, Inc. (Silver.com, ProvidentMetals.com)Washington AGOctober 13, 2026Monitoring
- DriveWealth, LLCWashington AGOctober 13, 2026Monitoring
- iRhythm Technologies Inc.Washington AGOctober 6, 2026Monitoring
- Poppins Payroll CompanyWashington AGSeptember 29, 2026Monitoring
- Ridgeway Pharmacy LtdWashington AGSeptember 21, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.