Sunwest Bank Data Breach

Sunwest Bank reported a data breach involving Social Security numbers to the Vermont Attorney General. The bank operates across five states, but has not disclosed how many customers nationwide are affected.

Sunwest Bank, a privately held commercial bank headquartered in Sandy, Utah, has confirmed a data breach involving Social Security numbers. The bank reported the incident to the Vermont Attorney General on August 14, 2026, confirming at least one affected Vermont resident. Sunwest Bank operates in California, Arizona, Idaho, Utah, and Florida, so the breach likely affects customers well beyond Vermont, though no broader figure has been made public.

Source: Vermont Attorney General Security Breach Notices list (reported 08/14/2026); ID Theft Center breach alert (08/18/2026 batch).

A Single-State Filing Rarely Tells the Whole Story

Vermont’s breach-notification law requires companies to report a breach even when only one Vermont resident is affected, which is why the state’s filing lists just one confirmed individual. That single-resident figure is not a measure of the breach’s overall size, it reflects Vermont’s low reporting threshold. Sunwest Bank has not disclosed how many customers in California, Arizona, Idaho, Utah, Florida, or elsewhere were affected.

What Information Was Exposed?

Sunwest Bank’s filing with the Vermont Attorney General confirms that Social Security numbers were involved in this breach. The bank has not publicly disclosed whether other categories of information, such as account numbers, dates of birth, or addresses, were also exposed. If you received a notice letter, it should specify the categories of information specific to you.

How Many People Are Affected?

Sunwest Bank has not disclosed a total number of affected individuals. The only confirmed figure is the single Vermont resident named in that state’s Attorney General filing, which reflects Vermont’s reporting threshold rather than the breach’s actual scope across the bank’s five-state footprint.

What Is Sunwest Bank Offering Affected Individuals?

Sunwest Bank has not publicly disclosed whether it is offering credit monitoring or identity protection services to affected customers. Anyone who received a notice letter should review it directly for enrollment instructions or contact information specific to the offer made to them.

Your Information Is at Risk

A Social Security number on its own is enough for identity thieves to open new credit accounts, file fraudulent tax returns, or apply for loans in another person’s name, and the risk is heightened when a bank is involved, since the same breach may expose account or routing information not yet confirmed publicly. Affected customers should monitor their bank and credit accounts closely, pull a free credit report, and consider a credit freeze.

Do You Have Legal Options?

Banks that collect and store Social Security numbers have a legal duty to secure that information and to notify affected customers without unreasonable delay.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you bank with Sunwest Bank or received a notice letter.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

FAQ

Who is affected by the Sunwest Bank data breach?

Sunwest Bank has confirmed at least one affected Vermont resident through a Vermont Attorney General filing. The bank operates in California, Arizona, Idaho, Utah, and Florida, but has not disclosed how many customers in those states are affected.

What information was exposed?

Sunwest Bank’s Vermont filing confirms Social Security numbers were involved. The bank has not disclosed whether other data types were also exposed.

Why does the filing only mention one person?

Vermont requires companies to report a breach even if it affects only one Vermont resident. That single-resident figure reflects Vermont’s low reporting threshold, not the true size of the breach across Sunwest Bank’s broader customer base.

Is Sunwest Bank offering credit monitoring?

That has not been publicly disclosed. If you received a notice letter, check it directly for any enrollment instructions or contact information.

Has my information actually been misused?

No confirmed instances of identity theft or fraud tied to this breach have been publicly reported. That does not mean the underlying exposure didn’t happen, only that no confirmed misuse has surfaced yet.

Do I have a legal claim?

Banks that collect and store Social Security numbers have a legal duty to secure that information and to notify affected customers without unreasonable delay. If you bank with Sunwest Bank or received a notice letter, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.