• Heritage detected a cybersecurity incident around March 2, 2026 involving an internal employee file share server and the exfiltration of files that may contain personal information.
• Bank customer accounts, customer systems, and operations were not impacted, and the company said it did not experience operational disruptions.
• Response actions included taking the affected system offline and deploying measures to stop unauthorized activity.
• The company engaged external forensic and legal advisors and notified banking regulators, law enforcement, and its cyber insurance carrier.
• As of the filing date, Heritage said it had not determined the incident was material or reasonably likely to have a material financial impact.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Heritage Financial Corporation published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001628280-26-020261), on March 23, 2026, and is solely responsible for the information contained therein.