Small New York bank reports data breach