First Secure Community Bank Data Breach Investigation

Data Breach Blog

Data Breach

First Secure Community Bank Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

September 18, 2026

by: Almeida Law Group

Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible First Secure Community Bank data breach. According to dark web monitoring sources, a hacker group calling itself Storm claimed responsibility for a cyberattack on First Secure Community Bank in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, First Secure Community Bank has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.

About First Secure Community Bank

First Secure Community Bank is a full-service commercial bank with approximately $515.4 million in assets, headquartered in Sugar Grove, Illinois. Originally established in 2000 as American Heartland Bank & Trust, it was renamed in April 2016 and is now wholly owned by First Secure Bank Group, Inc., a three-bank holding company. The bank operates five branches serving the west suburban Chicago area, with locations in Sugar Grove, Aurora, Naperville, Joliet, and Morris, Illinois. It offers personal and business banking services including residential lending, credit cards, certificates of deposit, and IRAs, and had approximately 45 employees as of March 2026.

What Happened?

First Secure Community Bank was listed in a ransomware leak-site allegation reported by Ransomware.live on September 18th, 2026. The Storm ransomware group — tracked by Microsoft as Storm-1175 — posted the claim on its dark web leak site. No independent confirmation of the incident by the bank, any regulator, or mainstream media was found. The claim should be treated as an unverified attacker allegation. No specific data types, data volumes, breach date, or discovery date were stated in the claim.

The Storm group (Storm-1175) is a financially motivated threat actor that began deploying a custom ransomware strain called StormEncryptor in August 2026, exploiting CVE-2026-18577, an authentication-bypass vulnerability in N-able N-central remote monitoring and management software. Microsoft assesses Storm-1175 as likely operating from a UTC+8 timezone consistent with Chinese-speaking regions and has previously associated the group with Medusa ransomware. The group has been actively posting claims against multiple U.S. organizations since August 2026. No prior data breaches or cybersecurity incidents involving First Secure Community Bank were found in public sources, and no litigation connected to this incident has been identified.

Key Facts at a Glance

What Should You Do?

Even though this incident has not been confirmed by First Secure Community Bank, if you are a customer of the bank it is a good idea to take protective steps now. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Monitor your bank and credit card statements closely for unfamiliar transactions, and review your credit reports at AnnualCreditReport.com. If you suspect your information has been misused, you can report it and get a personal recovery plan at IdentityTheft.gov.

Your Legal Rights

If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.