Police & Nurses Limited

P&N Bank, operating as Police & Nurses Limited, is an Australian customer-owned bank with historical ties to police and nursing communities. As a mutual institution, it is owned by its customers, which typically directs its operations toward member benefits rather than shareholder profits. The bank provides retail banking services, including transaction and savings accounts, lending, and mortgages, to individual customers across Australia. Its customer-owned structure often results in a focus on competitive pricing and community-oriented service. While specific metrics regarding its size or branch network are not disclosed, the organization's reach is evidenced by the approximately 100,000 customers affected by a significant data breach in 2019. This incident, while highlighting external vulnerabilities, also demonstrated the bank's established security protocols that protected critical financial assets and identification documents.

The 2019 breach occurred when attackers compromised a third-party hosting provider during a server upgrade, gaining access to a separated customer relationship management system. Personal information such as names, addresses, emails, ages, customer and account numbers, and account balances were exposed, though funds and sensitive documents remained secure on isolated systems. Upon discovery, the bank immediately disabled the vulnerability source, engaged law enforcement, and commissioned a major accounting firm to audit its IT infrastructure. This response underscored a commitment to transparency and remediation, aligning with industry standards for incident handling. The event has likely informed the bank's ongoing security investments and third-party risk management strategies. Despite the breach, the segregation of systems prevented direct financial theft, reflecting prior security investments. The incident remains a notable chapter in the bank's operational history, illustrating both the challenges of third-party dependencies in modern banking and the importance of layered security defenses.