---
schema_version: "secwatch.filing_event.v1"
accession: "0000943374-26-000261"
form_type: "8-K"
ticker: "SRBK"
cik: "0001951276"
company_name: "SR Bancorp, Inc."
filed_at: "2026-07-10T20:29:33+00:00"
generated_at: "2026-07-10T20:31:24.861034+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.6
calibrated_materiality_score: 0.6
confidence: "high"
source: SEC EDGAR
---

# SR Bancorp reports data security incident at service provider Mercadien; customer PII accessed

## Summary
- Unauthorized actor accessed Mercadien's servers, acquiring Bank customer data including SSN, account numbers, and DOB.
- Somerset Regal Bank's systems were not impacted; no disruption to operations, customer access, or payment systems.
- Customer notifications are being provided through Mercadien as required by federal and state laws.
- Company states incident has not had and is not expected to have a material impact on financial condition or results.

## SEC filing metadata
- accession: 0000943374-26-000261
- form_type: 8-K
- ticker: SRBK
- cik: 0001951276
- company_name: SR Bancorp, Inc.
- filed_at: 2026-07-10T20:29:33+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.6
- calibrated_materiality_score: 0.6
- confidence: high
- sec_items: 8.01, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/1951276/000094337426000261/0000943374-26-000261-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/1951276/000094337426000261/srbk-20260706.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0000943374-26-000261
- JSON: https://secwatch.observer/filing/0000943374-26-000261.json
- Plain text: https://secwatch.observer/filing/0000943374-26-000261.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.