The PNC data breach lawsuit filed in September 2025 was voluntarily dismissed five days after it was filed, so there is no active case, no class, and no settlement for customers to join. The suit claimed hackers had stolen 740,000 PNC customer records, but PNC said the underlying dark web post was fabricated and that no breach of its systems had occurred. The plaintiff dropped the case on September 28, 2025.1Bloomberg Law. PNC Customer Drops Suit Over Data Hack Bank Says Didn’t Happen
What the Lawsuit Claimed
In early September 2025, a group calling itself “Market Exchange” posted on a dark web forum claiming to have stolen 740,000 PNC customer records, including names, Social Security numbers, and contact information.2Bloomberg Law. PNC Hit With Class Suit Over Breach of 740,000 Customer Records
On September 23, 2025, plaintiff Madonna Blunt filed a proposed class action in the U.S. District Court for the Western District of Pennsylvania. The case, Blunt v. The PNC Financial Services Group Inc. (Case No. 2:25-cv-01469), was brought by Kopelowitz Ostrow P.A. and Milberg Coleman Bryson Phillips Grossman PLLC. The complaint alleged PNC failed to implement reasonable security measures and that Market Exchange had exfiltrated the records as a result.3Top Class Actions. PNC Bank Faces Class Action Lawsuit Over Data Breach Exposing 740,000 Records
Why the Case Was Dropped
PNC rejected the allegations within days. On September 26, 2025, the bank publicly called the dark web posts “bogus” and “misinformation created by cybercriminals,” and said its cybersecurity team found no evidence that PNC’s systems or customer records had been compromised. PNC also said third-party intelligence showed Market Exchange had made similar unsubstantiated claims against other companies since at least March 2025.4PNC Mediaroom. PNC Rejects False Data Breach Claims
PNC did acknowledge an unrelated “minor mailing error” in Massachusetts, in which forms containing a customer’s name and Social Security number went to the wrong person.5Commonwealth of Massachusetts. PNC Financial Services Inc. Notice of Data Breach The bank accused plaintiff law firms of tying that small incident to the dark web claims to lend them credibility, calling the linkage “intentionally and recklessly deceptive” and designed “to solicit lawsuits.” PNC threatened legal action against the firms if the solicitation continued.6WPXI. PNC Denies Data Breach Claims, Calls Out Opportunistic Law Firms for False Allegations
Two days later, on September 28, 2025, the plaintiff voluntarily dismissed the case.1Bloomberg Law. PNC Customer Drops Suit Over Data Hack Bank Says Didn’t Happen
Can You Still Join or Claim Money?
No. Because the case was dismissed, there is no certified class, no settlement fund, and no claims process. No money has been paid out, and no further proceedings are scheduled in connection with the Blunt lawsuit.
In its most recent annual report filed with the SEC in February 2025, PNC stated: “We have not experienced any material cybersecurity incidents that have impacted PNC’s business strategy, results of operations or financial condition to date.”7Board Cybersecurity. PNC Financial Services Group Cybersecurity 10-K The September 2025 allegations arose after that filing, and PNC’s position that no breach occurred is consistent with its decision not to file a supplemental cybersecurity disclosure.
Why the Story Keeps Resurfacing
Market Exchange has continued using PNC’s name even after the lawsuit was dropped. In January 2026, the group posted a new listing on a cybercrime forum offering a purported database of six million “high-value” PNC clients for sale. Cybersecurity analysts have described Market Exchange’s method as building “combolists” by aggregating publicly available property records and data from older, unrelated leaks, then repackaging the compilation as an exclusive banking breach to command higher prices. The pitch targets buyers interested in “whaling” attacks, in which scammers use real financial details to craft phishing emails aimed at wealthy individuals.8BrinzTech. BrinzTech Alert: Alleged Database of PNC Bank 6 Million High-Value Clients Is on Sale PNC has not acknowledged any breach tied to these later postings.
Other PNC Lawsuits That Are Not Data Breach Cases
Several other active lawsuits against PNC circulate online and are sometimes confused with a data breach case. They are not.
A separate proposed class action, Erakat v. PNC Bank, National Association (Case No. 2:26-at-00581), was filed in April 2026 in the U.S. District Court for the Eastern District of California. It alleges PNC embedded tracking pixels from Pinterest, LinkedIn, and X on its personal finance pages, capturing the full URLs of pages users visited and sharing that activity for advertising without consent, in alleged violation of the California Invasion of Privacy Act and the Federal Wiretap Act. Similar suits were filed against Wells Fargo and U.S. Bank.9Bloomberg Law. PNC Bank, US Bank, Wells Fargo Sued Over Online Data Tracking The case is in its early stages, with no class certified and no settlement.10PACER Monitor. Erakat v. PNC Bank, National Association
A cash sweep lawsuit alleges PNC Investments deposited brokerage clients’ uninvested cash into sweep accounts paying interest as low as 0.05 percent while the federal funds rate exceeded 5 percent; interim class counsel was appointed in July 2025.11Class Law Group. PNC Cash Sweep Class Action Lawsuit An October 2025 lawsuit accuses PNC and other major banks of colluding to fix interest rates on consumer loans.12ClassAction.org. PNC Bank Class Action Lawsuits None of these cases involve allegations of a data breach.