BayFirst Financial discloses a material cybersecurity incident

What the filing says

On August 14, 2025, BayFirst National Bank ("BayFirst") was notified of a cybersecurity incident experienced by a third-party provider of marketing services. On October 28, 2025, the third-party provider confirmed that some customer information was exposed by this incident. Upon learning of the incident, the third-party provider immediately launched an investigation, worked with BayFirst to understand the scope of the issue, and engaged the appropriate cybersecurity experts to assist.