Community Bank in Pennsylvania has been forced to disclose a serious security lapse after an employee mistakenly uploaded customer data to an AI chatbot, exposing sensitive personal information including names, dates of birth and Social Security numbers.

The bank filed a public notice with the U.S. Securities and Exchange Commission on May 7th, revealing that the incident was due to the use of unauthorized artificial intelligence software.

While the exact nature of the mishap remains unclear, it’s speculated that an employee may have uploaded customer data without realizing its potential risks. Community Bank is now evaluating the affected data and sending notifications in compliance with relevant laws, but details on how many customers were impacted or which AI application was involved are still scarce.

CEO John Montgomery did not respond to requests for comment from TechCrunch. The Register broke the story first.