SR Bancorp, Inc. 8-K

What Happened
SR Bancorp, Inc. (SRBK) filed an 8-K on July 10, 2026, disclosing a data security incident at Mercadien (the vendor that provides internal audit-related services). An unauthorized actor accessed and acquired files on Mercadien’s servers that included certain Somerset Regal Bank customer information. The Company stated the Bank’s own systems were not involved or impacted and there was no disruption to customer access, payment systems, or the Bank’s core IT infrastructure.

Key Details

• Filing date: July 10, 2026 (Form 8-K, Item 8.01 — Other Events).
• Vendor: Mercadien (provides internal audit-related services).
• Data types reported as accessed: customer names, Social Security numbers, account numbers, identification documents and/or dates of birth.
• Impact to operations: Somerset Regal Bank systems were not affected; no operational disruption reported.
• Company position: Customer notifications are being provided through Mercadien as required by law; SR Bancorp currently does not expect a material impact to consolidated financial condition or results.

Why It Matters
For investors, the immediate takeaway is that the breach occurred at a third-party vendor rather than within SR Bancorp or Somerset Regal Bank systems, and the company reports no operational disruption or expected material financial impact as of the filing. However, the 8-K includes forward-looking cautions noting potential risks—such as misuse or publication of data, regulatory or legal exposure, reputational harm, and uncertainty around insurance coverage—which could affect costs or results if circumstances change. Investors should monitor follow-up disclosures, customer notification outcomes, and any regulatory or legal developments.