Orrstown Bank Data Breach
Last Updated on June 25, 2026
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the Orrstown Bank data breach as they investigate whether a class action lawsuit can be filed.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the Orrstown Bank breach.
Orrstown Bank Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Orrstown Bank data breach.
As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the Orrstown Bank data breach or otherwise believe they are affected.
Orrstown Bank Security Incident: What Happened?
Orrstown Financial Services, operating in Pennsylvania and Maryland as Orrstown Bank, recently disclosed that the information of 83,938 people may have been exposed in a data breach involving third-party vendor Mercadien, P.C. CPAs.
According to a Form 8-K filed with the Securities and Exchange Commission, on May 21, 2026, Orrstown was notified that a vendor had experienced a data breach involving unauthorized access to the sensitive information of certain Orrstown customers. Orrstown's own systems were not compromised in the incident.
A sample notification letter (pictured below) identified the vendor as Mercadien and stated that the information potentially exposed in the Orrstown data breach includes names, dates of birth, addresses, Social Security numbers or individual tax identification numbers, account numbers, and government identification numbers, such as driver’s license numbers or passport numbers.
What You Can Do After the Orrstown Bank Data Breach
If your information was exposed in the Orrstown Bank data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force Orrstown Bank to ensure they take proper steps to protect the information they were entrusted with.
Orrstown Bank Data Breach Notice
Published: June 2, 2026
Before commenting, please review our comment policy.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.