Lowndes Bancshares Inc dba Farmers and Merchants Bank data breach

What we know

Lowndes Bancshares Inc, doing business as Farmers and Merchants Bank, is a deeply rooted financial institution providing traditional banking, lending, and wealth management services to communities in Nebraska. As a licensed bank, the institution routinely handles a vast volume of deeply sensitive financial and personal documentation. To facilitate checking and savings accounts, mortgage originations, commercial loans, and electronic fund transfers, the bank necessarily collects and retains extensive consumer data. Because financial trust forms the core of its operations, the safeguarding of this confidential information is paramount to its day-to-day business obligations. In 2025, Lowndes Bancshares Inc dba Farmers and Merchants Bank reported a significant data security incident to the Nebraska Attorney General. While the full mechanics of the intrusion are still under investigation, data security incidents impacting regional financial institutions typically involve sophisticated cyberattacks, unauthorized network infiltration, or third-party vendor compromises. In many modern financial sector breaches, malicious actors exploit vulnerabilities in legacy infrastructure or leverage stolen credentials to infiltrate networks, gaining undetected access to internal databases containing customer records before exfiltrating sensitive files. The exposure resulting from a financial institution breach compromises information that is exceptionally lucrative for cybercriminals and uniquely damaging to victims. Exposed data categories frequently include full legal names, Social Security numbers, dates of birth, bank account numbers, routing numbers, and login credentials. When malicious actors obtain Social Security numbers alongside financial account details, victims face an immediate and severe risk of financial account takeover, unauthorized wire transfers, fraudulent credit card applications, and ongoing identity theft. Unlike a compromised password that can be reset, core identity elements like Social Security and bank routing numbers cannot be easily changed, leaving affected individuals vulnerable to persistent financial fraud for years. Financial institutions like Lowndes Bancshares Inc dba Farmers and Merchants Bank are bound by strict statutory and regulatory frameworks designed to protect consumer data, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable Nebraska state data privacy laws. Under these federal and state standards, banking entities are legally mandated to maintain comprehensive administrative, technical, and physical safeguards to protect non-public personal information. The occurrence of a data breach strongly suggests a potential failure in these mandated security protocols, raising serious questions regarding whether the institution maintained adequate encryption, timely security patches, network segmentation, and proactive access monitoring. If you received a data breach notification letter from Lowndes Bancshares Inc dba Farmers and Merchants Bank, it serves as formal legal acknowledgment that your private financial information was compromised while under the bank's care. Legally, the receipt of this notice establishes your standing to participate in a class action lawsuit aimed at holding the institution accountable for failing to secure your data. Importantly, you do not need to show proof of actual financial theft or out-of-pocket loss to join a legal claim; the increased risk of future identity theft and the loss of privacy are sufficient grounds for action. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.

See every breach reported in Nebraska or read what to do after a ransomware attack.