Shadow AI in Banking: The Real Cost of Employees Going Around IT
In May 2026, Community Bank's parent filed the first SEC Form 8-K triggered by shadow AI, after an employee submitted customer names, SSNs, and dates of birth to a public LLM. No hacker, no malware, and no operational disruption, just an employee routing around the bank's systems to work faster. That filing reframes the cost of shadow AI in banking as a material compliance event driven by data sensitivity and volume, not an IT background risk.