Happy State Bank Data Breach Investigation Edelson Lechtzin Llp Probes Class Action Claims After Customer Data Is Exposed 302887011

National class action law firm offers free, confidential case evaluations to Happy State Bank and Centennial Bank customers whose personal information may have been exposed in the reported data breach.

NEWTOWN, Pa. , Sept. 22, 2026 /PRNewswire/ -- Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from a reported data breach at Happy State Bank, a division of Centennial Bank. Anyone who has received a data breach notice from Happy State Bank or Centennial Bank, or who believes their personal information may have been exposed, can request a free case evaluation.

Happy State Bank data breach — at a glance

Company: Happy State Bank, a Texas-based division of Centennial Bank, providing personal and business banking services.

Reported: A notification filed with the Texas Attorney General disclosed a data security incident; affected individuals were notified by U.S. Mail.

How it reportedly happened: According to public accounts, a third-party service provider, Fidelity Information Services (FIS), inadvertently sent a customer file to an unintended recipient. The incident has also been described as involving Happy State Bank's corporate email environment.

When: The misdirected file is reported to have been sent on or August 7, 2026, and opened by the unintended recipient on or August 10, 2026.

Who may be affected: Approximately 2,050 Texas residents, with additional individuals potentially affected nationwide.

Status: Certain details of the incident, including its full scope and impact, remain unconfirmed or have not been publicly detailed.

According to a notification filed with the Texas Attorney General, Happy State Bank and its parent, Centennial Bank, reported a data security incident affecting customer information. Public accounts describe the incident as arising from a third-party vendor error: an associate at Fidelity Information Services (FIS), which assists the bank with certain banking operations, is said to have prepared a secure email containing a customer file and inadvertently sent it to an unintended recipient — reportedly an employee at another financial institution.

Public accounts indicate the misdirected file was sent on or August 7, 2026, and that the unintended recipient opened it on or August 10, 2026, before notifying FIS. FIS and the bank report taking steps to contain the incident, including recalling the email, terminating access to the file, and confirming the file was destroyed.

Important details — including the incident's true scope, the specific data involved for each individual, and the total number of people affected nationwide — have not been fully confirmed publicly.

What Personal Information May Be at Risk

Based on the notification filed with the Texas Attorney General, the information potentially involved may include:

Social Security numbers

Driver's license numbers

Government-issued identification numbers

Financial information, such as account or credit and debit card numbers

Health insurance information

Other sensitive personal information

Financial institutions maintain highly sensitive customer information. The combination of Social Security numbers, financial account information, and government identification can increase the risk of identity theft , financial fraud , unauthorized transactions, and fraudulent account activity.

The investigation focuses on current and former Happy State Bank and Centennial Bank customers whose personal information the bank maintained. Anyone who has received a data breach notification connected to this incident may face an increased risk of identity theft and fraud and is encouraged to come forward.

Recommended Steps to Protect Yourself

Review your account statements and credit reports regularly and stay alert for suspicious activity.

Confirm whether your information was involved in the Happy State Bank incident.

Preserve any letters or emails you received the breach.

If credit monitoring was offered in your notice, consider enrolling, and consider placing a fraud alert or security freeze with the three major credit bureaus.

Us for a Free Case Evaluation

Speak confidentially with a data privacy attorney today: Marc Edelson, Esq., Edelson Lechtzin LLP, 411 S. State Street, Suite N-300, Newtown, PA 18940; Phone: 844-696-7492 ; Email: [email protected] ; Web: .

Edelson Lechtzin LLP

Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. In addition to data breach litigation, the firm handles class and collective actions involving securities and investment fraud , federal antitrust violations, ERISA employee benefit plans, wage theft , and consumer fraud .

Media and Partnership Inquiries: Use the information above to connect with our team regarding interviews, co-counsel opportunities, and referral partnerships.

Legal Notice: This press release may be considered Attorney Advertising in some jurisdictions. Prior results do not guarantee a similar outcome. The reported data breach described above, and certain details concerning it, remain unconfirmed.

SOURCE Edelson Lechtzin LLP