Hatch Bank Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Hatch Bank regarding its recent data breach. The Hatch Bank data breach involved sensitive personal identifiable information belonging to over 139,000 individuals.


Hatch Bank is a fully online banking platform that provides accounts for individuals and small businesses. As an online bank, Hatch Bank offers a variety of services, from checking and saving accounts as well as debit and credit cards to loans for small businesses. Hatch Bank also provides a fintech platform to aid in loans, deposits, and payments. Founded in 1981 by its parent company, Firstrust Bank, Hatch Bank began operating out of San Marcos, California and is still headquartered there today.


On January 29, 2023, Hatch Bank’s technology vendor, Fortra, discovered that it had experienced a data breach in which the sensitive personal identifiable information in its systems may have been accessed. Through its investigation, Fortra determined that an unauthorized actor may have accessed sensitive information belonging to Hatch Bank between January 30 and January 31, 2023. On February 28, 2023, Hatch Bank began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number

If you received a breach notification letter from Hatch Bank:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the Hatch Bank data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Hatch Bank;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: