The bank said it was alerted to the problem by one of its data vendors, who spotted unusual activity involving its access codes.
Customers are receiving letters warning them of the possible breach and offering a free, one year identity theft protection program membership.
People are urged to contact their credit bureaus and check accounts for any suspicious activity.