UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
WASHINGTON, D.C. 20549
FORM 8-K
CURRENT REPORT
Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934
Date of Report (Date of earliest event reported): May 30, 2025
(Exact name of Registrant as Specified in Its Charter)
|
|
|
|
|
(State or Other Jurisdiction
of Incorporation)
|
(Commission File Number)
|
(IRS Employer
Identification No.)
|
|
|
|
|
|
(Address of Principal Executive Offices)
|
(Zip Code)
|
(703 ) 481-4567
(Registrant’s Telephone Number, Including Area Code)
Not Applicable
(Former Name or Former Address, if Changed Since Last Report)
Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instructions A.2. below):
Securities registered pursuant to Section 12(b) of the Act:
|
Title of each class
|
Trading
Symbol(s)
|
Name of each exchange on which registered
|
||
|
|
|
The
|
||
|
interest in a share of 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred Stock) |
|
The
|
Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).
Emerging growth company ☐
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
Item 8.01 Other Events.
On May 30, 2025, MainStreet Bancshares, Inc. (the “Company”) determined to report information related to a data security incident which it has been investigating. In March 2025, the Company was made aware that an outside vendor to the core bank had been compromised. The Company immediately activated its incident response process to investigate and remediate the incident and initially concluded that the incident's impact would likely not be material. Although each vendor undergoes a thorough security vetting process, we swiftly ceased all activity with this provider.
On April 28, 2025, we concluded our own review and determined the third-party vendor’s compromised system included personally identifiable information on a small subset of our customer base, approximately 4.65%. The Company determined that its own information technology systems and networks had not been compromised or affected, no unauthorized transactions had been executed, no monies had been transferred to the unknown persons, and customers had been able to continue to execute transactions with the Company. The Company has notified appropriate regulators. On May 26, 2025, appropriate monitoring systems were established and the impacted customers were notified and provided tools to monitor any suspicious activity.
The incident has not had a material impact on the Company’s current operations, and the Company does not anticipate any material impact on the Company’s financial condition, results of operations, reputation, relationships, or prospects.
The information furnished under Item 8.01 of this Current Report on Form 8-K, shall not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), or otherwise subject to the liabilities of that Section, and it shall not be deemed incorporated by reference in any filing under the Exchange Act, or the Securities Act of 1933, as amended, except as expressly set forth by specific reference in such filing to this Form 8-K.
SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.
|
|
|
MAINSTREET BANCSHARES, INC
|
|
|
|
|
|
|
|
Date: May 30, 2025
|
|
By:
|
/s/ Thomas J. Chmelik
|
|
|
|
|
Name: Thomas J. Chmelik
|
|
|
|
|
Title: Chief Financial Officer
|