Shadow AI risk: a bank disclosed a material incident involving an unauthorized AI app

What happened

A Form 8-K filed with the SEC on May 11, 2026 shows shadow AI risk reaching a public company’s disclosure obligations.

In the filing, under Item 1.05 (Material Cybersecurity Incidents), CB Financial Services, Inc. says that on May 5, 2026, its wholly owned subsidiary Community Bank “became aware of an internal incident involving the handling of certain non‑public customer information using an unauthorized artificial intelligence-based software application.” The company says the bank “promptly took steps to secure the information at issue” and began an internal investigation with external cybersecurity advisors. It says that, as of the filing, the investigation, “including the scope and root cause, remains ongoing.”

The filing says the incident did not disrupt the bank’s operations, customer access to accounts or services, payment systems, or core IT infrastructure. However, “due to the volume and sensitive nature of the non-public information at issue,” the company determined on May 7, 2026 that the event was material. It says the customer information the bank has determined was disclosed includes “customer names, social security numbers and dates of birth.” The company says it is notifying customers as required, has been in contact with banking and financial regulators, and is taking steps to prevent similar incidents, including strengthening existing controls, adding controls, and enhancing monitoring. It says the incident has not had, and is not expected to have, a material impact on its financial condition or results of operations.

The filing does not name the AI application or describe how the information was handled.

Why it matters to leaders (our analysis)

This filing shows that the use of an unapproved AI tool can become a disclosable cybersecurity incident, with customer notification and regulator contact, even without any disruption to systems. The company’s own description is brief, and the filing said the scope and root cause were still under investigation, so it doesn’t support conclusions about what happened or why.

What it does show is where the question now sits. Which AI tools may touch regulated data, how use of other tools would be detected, and how such an event would be assessed for materiality are governance questions for leadership, not only IT.