CBFV · CB Financial Services, Inc.

CB Financial Services, Inc. reported a material cybersecurity incident at its wholly-owned subsidiary, Community Bank, stemming from the unauthorized use of an artificial intelligence-based software application to handle non-public customer information. Discovered on May 5, 2026, the Bank immediately secured the affected data and launched an internal investigation supported by external cybersecurity advisors, which continues to assess the full scope and root cause. Despite no interruptions to core banking operations, account access, payment systems, or IT infrastructure, the incident's materiality arises from the sensitive nature of the exposed data—specifically customer names, social security numbers, and dates of birth—prompting a materiality determination on May 7, 2026. The Company is actively notifying impacted customers per federal and state requirements, maintaining open dialogue with banking regulators, and implementing remedial measures such as enhanced controls and monitoring to prevent recurrence. Investors should note the commitment to data protection amid rising cybersecurity risks in financial services, though the filing explicitly states no anticipated material effect on financial condition or operations as of disclosure.