On February 24, 2025, Reading Cooperative Bank filed an official data breach notice with the Maryland Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Maryland Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Maryland AG show that Reading Cooperative Bank confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
As a prominent financial institution, Reading Cooperative Bank provides a comprehensive suite of banking and financial services, including commercial and personal checking accounts, residential mortgages, wealth management, and commercial lending. Operating within the highly regulated financial sector, the institution routinely gathers, processes, and stores vast quantities of high-value, highly sensitive personal and financial data. To facilitate seamless banking operations, loan originations, and regulatory compliance, the bank maintains extensive digital archives containing the foundational credentials and assets of its customers, employees, and business partners, making it an inevitable target for cybercriminals seeking lucrative data repositories.
In 2025, Reading Cooperative Bank reported a significant cybersecurity incident to the Maryland Attorney General, prompting widespread concern among account holders and regulatory bodies alike. While specific forensic details continue to emerge, data security incidents impacting financial institutions typically involve sophisticated cyberattacks such as unauthorized network intrusions, targeted malware deployment, or vulnerabilities exploited within third-party vendor ecosystems. In the banking sector, threat actors frequently deploy ransomware or credential-stuffing techniques designed to bypass perimeter defenses, infiltrate core banking databases, and extract deep caches of non-public personal information.
The exposure of sensitive financial data carries severe, long-term consequences for affected individuals. Compromised records typically span full names, Social Security numbers, dates of birth, bank account and routing numbers, credit scores, and detailed transaction histories. When malicious actors obtain this combination of data, victims face an immediate and elevated risk of financial account takeover, unauthorized wire transfers, fraudulent loan applications, and comprehensive identity theft. Unlike transient security lapses, leaked banking credentials and government identification numbers cannot be easily reset, leaving victims vulnerable to ongoing financial fraud and targeted phishing campaigns for years to come.
Financial institutions like Reading Cooperative Bank are bound by stringent federal and state statutory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission (FTC) Act, alongside state data privacy laws. These regulatory mandates impose strict affirmative duties on financial entities to implement robust administrative, technical, and physical safeguards designed to protect customer non-public personal information from unauthorized access and disclosure. The occurrence of a widespread data breach strongly indicates a failure in these mandatory security protocols, suggesting that the institution may have fallen short of industry standards in maintaining adequate network monitoring, encryption, and vulnerability management.
Receiving an official data breach notification letter from Reading Cooperative Bank serves as formal legal confirmation that your private financial records were compromised due to corporate negligence. Under modern class action jurisprudence, the receipt of such a letter—and the resulting imminent risk of identity theft—provides affected consumers with the legal standing necessary to participate in a data breach lawsuit. You do not need to wait until you experience actual financial loss or fraudulent charges to take legal action. Our law firm is actively investigating these claims on a contingency fee basis, meaning there are never any out-of-pocket costs or upfront fees, and we only recover compensation if we successfully secure a recovery on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Reading Cooperative Bank
You were a customer, patient, employee, or client of Reading Cooperative Bank
Your personal information was stored in Reading Cooperative Bank's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Do not discard the Reading Cooperative Bank letter. It documents your standing as an affected individual — the foundation of any claim you file.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Time limits can forfeit your claim. Have attorneys review your Reading Cooperative Bank case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Reading Cooperative Bank's systems were compromised, exposing stored personal records.
Reported to Attorney General
February 24, 2025
Reading Cooperative Bank filed its official breach notice with the Maryland Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Breach victims may recover several categories of loss. What applies in the Reading Cooperative Bank matter depends on your state, the data involved, and the company's conduct.
States like Maryland may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
The companies below also filed breach notices with the Maryland Attorney General. Letter recipients for any of them can pursue a review.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris