A US bank reveals a security vulnerability after sharing customer data with an artificial intelligence application

The community bank, which operates in Pennsylvania, Ohio and West Virginia, disclosed a cybersecurity incident that exposed customers’ names, dates of birth and Social Security numbers.

In a May 7 8-K filing with the U.S. Securities and Exchange Commission, the bank said it discovered customers’ personal data had been exposed due to the use of an “unauthorized software application based on artificial intelligence.”

The bank said it disclosed the incident “due to the amount of non-public information involved and its sensitive nature.”

It’s not clear what exactly happened, but based on the language in the file, it appears that someone working at Community Bank may have uploaded customer data to an online AI chatbot, potentially exposing that information to the chatbot’s maker.

While Community Bank did not disclose the number of customers affected by the incident, nor the AI ​​application involved, the company said it is “evaluating which customer data has been affected” and is sending notifications in accordance with relevant laws.

John Montgomery, CEO of the community bank, did not immediately respond to TechCrunch’s request for comment.

First report the vulnerability to the registry.