The Vendor You Cannot Name.

Two U.S. banks disclosed a breach at the same unnamed third-party vendor in April 2026. Six class action lawsuits followed in two weeks. The vendor still has not been publicly named — and the disclosure language hides what every customer, plaintiff, and regulator actually needs to know.