Yes, mortgage customers can pursue legal action if they received an individual Citizens Bank breach notice. No payment claim is open now because no court has approved a settlement.
A class-action lawsuit lets many people with similar harm seek relief in one case. Citizens faces cases from an April vendor incident and a separate September unauthorized-access incident. Your letter tells you which incident includes you.
Official resources:
- Explore the official data from Ca — Use this primary source to review the underlying data.
- Check eligibility on Emeryreddy’s official study page — Use this page to check the study’s participation requirements.
Table of Contents
- Which breach touches mortgage information?
- What lawsuits are now pending?
- Do you qualify to act today?
- What steps protect a future claim?
Which breach touches mortgage information?
Citizens confirmed an April 2026 incident at a vendor that printed statements. Gblock said Everest claimed 3.4 million Citizens records and threatened release by April 27. Citizens said most exposed data was masked test data, not live customer files.
Citizens limited real April exposure to a few thousand customers. That exposure involved names, addresses and account numbers found on checks. It did not include Social Security numbers, TEISS reported.
What lawsuits are now pending?
Providence Business News reports two lawsuits filed in Providence against Citizens Bank on April 22. The suits allege negligence and seek class-action status. They seek more than $5 million in damages. A separate case targets the September incident.
Plaintiff Shannon Rung filed Rung v. Citizens Bank N.A., No. 1:26-cv-00781, on Oct. 21, 2026 in Rhode Island federal court. The suit alleges failure to safeguard personal information, according to an All About Lawyer lawsuits roundup.
Do you qualify to act today?
Only people who got an individual notice can act now. Emery Reddy cites a Texas notice total of 14,371 Texans notified by U.S. mail for the September incident.
That list shows mortgage and other customers count only with a letter addressed to them. No court-approved settlement or claims payout has been announced. The pending investigation page from Chimicles Schwartz Kriner & Donaldson-Smith describes only investigations and pending lawsuits. Save the notice letter and document any losses tied to the breach.
What steps protect a future claim?
TEISS describes the September unauthorized-access notice as offering two-year Equifax Credit Watch Gold. The offer includes monitoring, alerts, lock, restoration and up to $1 million insurance. Enroll with the activation code in your letter before its deadline.
Keep records that link you to the incident and any costs. Courts and investigators rely on paper proof of harm. Enroll with the code in your letter before its printed deadline.
- Save every breach letter and envelope with the postmark.
- Log fraud calls, replacement-card fees, credit freezes and time spent.
- Keep bank statements showing unfamiliar charges or account changes.