2025-10-30 BayFirst Financial Corp. Cybersecurity Incident

Page last updated on October 30, 2025

BayFirst Financial Corp. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-10-30 16:00:16 EDT.

Company Summary

BayFirst Financial Corp. is a Saint Petersburg, Florida–based bank holding company that provides community banking, lending, and treasury services to small and medium-sized businesses and individuals across several Florida counties.

Incident Details

Material: No
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: Social Security Number, Date of Birth, Name

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: 2025-10-30
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: No Attack Tactics Tracked (yet)
Attack Techniques¹: No Attack Techniques Tracked (yet)

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-10-30

BayFirst Financial Corp. filed an 8-K at 2025-10-30 16:00:16 EDT
Accession Number: 0001649739-25-000246

Item 1.05 Material Cybersecurity Incidents.

On August 14, 2025, BayFirst National Bank ("BayFirst") was notified of a cybersecurity incident experienced by a third-party provider of marketing services. On October 28, 2025, the third-party provider confirmed that some customer information was exposed by this incident.

Upon learning of the incident, the third-party provider immediately launched an investigation, worked with BayFirst to understand the scope of the issue, and engaged the appropriate cybersecurity experts to assist. The third-party provider also promptly notified law enforcement. The incident was limited to the third-party provider's environment. Based on the information available to date, personal information, including name, date of birth, and social security/tax identification numbers of some BayFirst customers were accessed without authorization. To date, there is no evidence of the misuse, or attempted misuse, of personal information as a result of this incident. Impacted customers will be notified directly of this incident.

BayFirst cannot quantify any material impact to its financial condition or operations, at this time.

Company Information