On May 15, 2026, Popular, Inc. was notified by third-party service provider Evertec, Inc. that a cybersecurity incident at Evertec had compromised certain data belonging to Banco Popular de Puerto Rico customers, including debit card numbers and other personal information. The Corporation's own systems were not accessed or affected by the incident. Popular, Inc. has implemented enhanced fraud monitoring and is working with Evertec to exercise its contractual right to cost and loss reimbursement. Popular, Inc. operates in the financial services industry, providing banking and financial services in Puerto Rico.