--- title: "Quontic Bank former-employee records incident" description: "Evidence-backed account of Quontic Bank former-employee records incident, covering what happened, impact, timeline, attack vector, technical details, and primary sources." incident_type: "Data incident" status: "active" last_modified: "2026-08-09" canonical_url: "https://www.ally.security/incidents/quontic-bank-former-employee-records-incident-2026" markdown_url: "https://www.ally.security/incidents/quontic-bank-former-employee-records-incident-2026.md" stix_url: "https://www.ally.security/incidents/quontic-bank-former-employee-records-incident-2026/stix.json" --- # Quontic Bank former-employee records incident Two former employees retained certain Quontic customer records after departing the company. Customer records retained by two former Quontic employees; affected fields varied by individual. Last modified Aug 9, 2026 · 3 sources ## Summary - **Environment:** Not publicly identified - **Operational impact:** No outage or recovery duration quantified - **Financial impact:** No public cost estimate ## What happened Two former employees retained certain [Quontic Bank](https://www.quontic.com/) customer records after departing the company. [2](#source-2) ## Impact Customer records retained by two former Quontic employees; affected fields varied by individual. [1](#source-1) [3](#source-3) Documented data types include: - Names — The sample notice states that names were involved; other fields varied by recipient. [1](#source-1) [3](#source-3) - Social Security numbers — Massachusetts incident report 2026-1176 marks Social Security numbers as breached. [1](#source-1) [3](#source-3) A cited record reports 111 individuals (Massachusetts residents affected according to incident report 2026-1176; not a national total; as of 2026-07-17). [1](#source-1) [3](#source-3) A cited record reports 40 individuals (Approximate number of Rhode Island residents who may be impacted; not a national total). [1](#source-1) Two former Quontic employees retained certain customer records after leaving the company. [1](#source-1) ## Timeline ### May 28, 2026 — Discovery Date Quontic says it became aware that two former employees retained customer records. [1](#source-1) ### July 16, 2026 — Documented event Date printed on the California sample notice. [1](#source-1) ### July 17, 2026 — Public disclosure Date reported to Massachusetts OCA and listed by the California Attorney General. [3](#source-3) ### August 9, 2026 — Briefing updated This briefing was last reviewed and updated on August 9, 2026. ## Threat Group & Attack Vector The cited public record does not establish a specific initial-access vector, malware family, exploited vulnerability, or ATT\&CK technique. ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response Quontic said its investigation found no evidence that the information was used to commit identity theft or fraud. Quontic offered affected recipients complimentary Experian credit monitoring and identity-restoration services. Quontic worked with authorities and reviewed its existing policies and procedures. No access path, attribution, scale, or recovery detail is inferred beyond the cited claims. [1](#source-1) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### Notice of Data Event — California sample official · Quontic Bank Acquisition Corp. ### Submitted breach notification sample — Quontic Bank Acquisition Corp. regulatory · California Department of Justice, Office of the Attorney General ### 2026 Data Breach Notification Report regulatory · Massachusetts Office of Consumer Affairs and Business Regulation
Evidence ledger Review the supporting structured claims. 1. **Resulted In · 100% confidence · current** May 2026 Quontic former-employee records incident: Quontic affected-individual notification 2. **Resulted In · 100% confidence · current** May 2026 Quontic former-employee records incident: Quontic said its investigation found no evidence that the information was used to commit identity theft or fraud. 3. **Affected Individual Count · 100% confidence · current** Quontic customer-record exposure: 111 individual 4. **Resulted In · 100% confidence · current** Quontic affected-individual notification: Quontic offered affected recipients complimentary Experian credit monitoring and identity-restoration services. 5. **Occurred At · 100% confidence · current** Quontic affected-individual notification: 2026-07-16 6. **Resulted In · 100% confidence · current** May 2026 Quontic former-employee records incident: Two former Quontic employees retained certain customer records after leaving the company. 7. **Affected Individual Count · 100% confidence · current** Quontic customer-record exposure: 40 individual 8. **Exposed Data Category · 100% confidence · current** Quontic customer-record exposure: Names 9. **Affected Organization · 100% confidence · current** May 2026 Quontic former-employee records incident: Quontic Bank Acquisition Corp. 10. **Resulted In · 100% confidence · current** May 2026 Quontic former-employee records incident: Quontic customer-record exposure 11. **Resulted In · 100% confidence · current** May 2026 Quontic former-employee records incident: Quontic worked with authorities and reviewed its existing policies and procedures. 12. **Exposed Data Category · 100% confidence · current** Quontic customer-record exposure: Social Security numbers 13. **Disclosed At · 100% confidence · current** May 2026 Quontic former-employee records incident: 2026-07-17 14. **Discovered At · 100% confidence · current** May 2026 Quontic former-employee records incident: 2026-05-28