What Is This About?

If you recently received a notice from BayFirst National Bank (a subsidiary of BayFirst Financial Corp.) (“BayFirst”) informing you that your personal information may have been exposed in a data breach, we would like to speak with you about your rights and potential legal remedies. BayFirst recently disclosed, in a public filing with the U.S. Securities and Exchange Commission (SEC), that a cybersecurity incident occurred at a third-party provider of marketing services, exposing the sensitive information of some BayFirst customers.

What Happened?

On August 14, 2025, BayFirst National Bank was notified of a cybersecurity incident involving one of its marketing service vendors. The third-party provider later confirmed, on October 28, 2025, that some customer information had been exposed as a result of the breach. According to BayFirst’s SEC filing, the vendor immediately launched an investigation, engaged cybersecurity experts, and notified law enforcement. The incident was reportedly limited to the vendor’s environment and did not involve BayFirst’s internal systems. While BayFirst has not found evidence of misuse, the exposed data includes highly sensitive information that could be used for identity theft or fraud.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information may have been compromised:
  • Name;
  • Date of birth; and
  • Social Security number.
 

What Action Can You Take?

My Data Breach Attorney is investigating whether affected users are entitled to compensation. If you received a notice from BayFirst National Bank there is no cost or obligation to participate. Complete the form above to find out about your rights and potential legal remedies available.

About BayFirst National Bank

BayFirst National Bank, headquartered in St. Petersburg, Florida, operates as a subsidiary of BayFirst Financial Corp. The bank provides a range of financial products and services, including consumer banking, commercial lending, and mortgage services. BayFirst is publicly traded on the Nasdaq under the ticker BAFN.

About

My Data Breach Attorney

Backed by the nationally recognized law firm Levi & Korsinsky, we combine decades of legal expertise with an unwavering focus on consumer advocacy. Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against the largest of corporations. The firm is a 100% contingency firm – we don't get paid unless you get paid! Prior results do not guarantee similar outcomes.

Frequently Asked Questions

Know Your Legal Rights After a Data Breach Incident

A data breach occurs when sensitive, confidential, or protected information is accessed, disclosed, or stolen without authorization. This may include personal data, financial information, medical information, or business secrets.

Our firm provides the following services:

  • Investigating the breach and determining liability.
  • Filing lawsuits or claims against negligent companies.
  • Helping recover financial damages.
  • Advising on legal steps to protect your rights.

As a consumer, you have the right to:

  • Be notified of the breach under U.S. laws, such as the California Consumer Privacy Act (CCPA) or General Data Protection Regulation (GDPR) if applicable.
  • Seek compensation for financial or reputational harm.
  • Take legal action against the entity responsible for negligence.

Depending on the case, you may be entitled to:

  • Reimbursement for financial losses (e.g., identity theft).
  • Compensation for emotional distress or loss of privacy.
  • Punitive damages if negligence is proven.

Yes, time is critical. If you suspect your data has been compromised:

  • Secure your accounts by changing passwords.
  • Monitor your credit reports for unusual activity.
  • Contact a law firm to explore legal options for compensation.

Our firm works on a contingency fee basis, meaning you pay nothing upfront. We only get paid if we recover compensation for you.

Take Action. Choose My Data Breach Attorney