Happy State Bank Data Breach Investigation: Edelson Lechtzin LLP Probes Class Action Claims After Customer Data Is Exposed

National class action law firm offers free, confidential case evaluations to Happy State Bank and Centennial Bank customers whose personal information may have been exposed in the reported data breach.

NEWTOWN, Pa., Sept. 22, 2026 /PRNewswire/ -- Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from a reported data breach at Happy State Bank, a division of Centennial Bank. Anyone who has received a data breach notice from Happy State Bank or Centennial Bank, or who believes their personal information may have been exposed, can request a free case evaluation.

Happy State Bank data breach — at a glance

• Company: Happy State Bank, a Texas-based division of Centennial Bank, providing personal and business banking services.
• Reported: A notification filed with the Texas Attorney General disclosed a data security incident; affected individuals were notified by U.S. Mail.
• How it reportedly happened: According to public accounts, a third-party service provider, Fidelity Information Services (FIS), inadvertently sent a customer file to an unintended recipient. The incident has also been described as involving Happy State Bank's corporate email environment.
• When: The misdirected file is reported to have been sent on or about August 7, 2026, and opened by the unintended recipient on or about August 10, 2026.
• Who may be affected: Approximately 2,050 Texas residents, with additional individuals potentially affected nationwide.
• Status: Certain details of the incident, including its full scope and impact, remain unconfirmed or have not been publicly detailed.
• Cost to you: Nothing. Click HERE to request a free and confidential evaluation.

What Happened

According to a notification filed with the Texas Attorney General, Happy State Bank and its parent, Centennial Bank, reported a data security incident affecting customer information. Public accounts describe the incident as arising from a third-party vendor error: an associate at Fidelity Information Services (FIS), which assists the bank with certain banking operations, is said to have prepared a secure email containing a customer file and inadvertently sent it to an unintended recipient — reportedly an employee at another financial institution.

Public accounts indicate the misdirected file was sent on or about August 7, 2026, and that the unintended recipient opened it on or about August 10, 2026, before notifying FIS. FIS and the bank report taking steps to contain the incident, including recalling the email, terminating access to the file, and confirming the file was destroyed.

Important details — including the incident's true scope, the specific data involved for each individual, and the total number of people affected nationwide — have not been fully confirmed publicly.

What Personal Information May Be at Risk

Based on the notification filed with the Texas Attorney General, the information potentially involved may include:

• Names
• Social Security numbers
• Dates of birth
• Addresses
• Driver's license numbers
• Government-issued identification numbers
• Financial information, such as account or credit and debit card numbers
• Health insurance information
• Other sensitive personal information

Financial institutions maintain highly sensitive customer information. The combination of Social Security numbers, financial account information, and government identification can increase the risk of identity theft, financial fraud, unauthorized transactions, and fraudulent account activity.

Who May Be Affected

The investigation focuses on current and former Happy State Bank and Centennial Bank customers whose personal information the bank maintained. Anyone who has received a data breach notification connected to this incident may face an increased risk of identity theft and fraud and is encouraged to come forward.

Your Legal Options

Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of individuals whose sensitive personal data may have been compromised in the reported breach. A successful case could recover compensation for losses such as lost time, out-of-pocket costs, and loss of privacy, and could push the responsible parties to strengthen how they protect personal information. The firm will evaluate your rights and potential claims at no cost. Click HERE to request a free consultation.

Recommended Steps to Protect Yourself

• Review your account statements and credit reports regularly and stay alert for suspicious activity.
• Confirm whether your information was involved in the Happy State Bank incident.
• Preserve any letters or emails you received about the breach.
• If credit monitoring was offered in your notice, consider enrolling, and consider placing a fraud alert or security freeze with the three major credit bureaus.

Contact Us for a Free Case Evaluation

Speak confidentially with a data privacy attorney today: Marc Edelson, Esq., Edelson Lechtzin LLP, 411 S. State Street, Suite N-300, Newtown, PA 18940; Phone: 844-696-7492; Email: [email protected]; Web: www.edelson-law.com.

About Edelson Lechtzin LLP

Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. In addition to data breach litigation, the firm handles class and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud.

Media and Partnership Inquiries: Use the contact information above to connect with our team regarding interviews, co-counsel opportunities, and referral partnerships.

Legal Notice: This press release may be considered Attorney Advertising in some jurisdictions. Prior results do not guarantee a similar outcome. The reported data breach described above, and certain details concerning it, remain unconfirmed.

SOURCE Edelson Lechtzin LLP