Police & Nurses Limited

P&N Bank operates as a customer‑owned mutual bank that provides a range of retail banking products and services to its members. These services include transaction and savings accounts, personal loans, home loans, credit cards and term deposits, all designed to meet everyday financial needs. The bank’s membership is open to individuals who meet eligibility criteria, with a historical emphasis on employees of police, nursing and emergency‑services organisations. Its offerings are intended to support the financial wellbeing of members across Australia.

As a mutual institution, P&N Bank is owned by its members rather than external shareholders, and any surplus is reinvested to improve rates, lower fees or enhance services. This member‑centric structure differentiates it from publicly listed banks and aligns its objectives with the interests of those it serves. The bank operates under the regulatory framework governing authorized deposit‑taking institutions in Australia, subject to oversight by the Australian Prudential Regulation Authority and compliance with the Banking Act 1959. Its organisational model emphasizes stability, community focus and a commitment to delivering value directly to its member base.

In December 2019 P&N Bank disclosed a data breach that occurred when attackers compromised a third‑party hosting provider during a server upgrade, gaining access to a separated customer relationship management system. The breach exposed personal information such as names, addresses, email addresses, ages, customer and account numbers and account balances for approximately 100,000 individuals, while funds, social security numbers and identification documents remained secure on other systems. Upon discovering the incident the bank immediately disabled the vulnerable component, engaged law‑enforcement authorities and commissioned a major accounting firm to audit its IT infrastructure. The bank also highlighted that its existing security measures for account protection remained intact and that it took steps to strengthen vendor‑management and security‑monitoring practices following the event.