At the end of June, the LockBit gang claimed to have breached the Federal Reserve's systems and exfiltrated 33 TB of sensitive data, allegedly including Americans' banking secrets. However, the leaked data was actually from Evolve Bank & Trust, an Arkansas-based financial institution. Documents released by LockBit on June 26 confirmed the breach involved Evolve Bank & Trust. The bank acknowledged the breach on its website, launched an investigation, and confirmed that some personal information might have been compromised. Evolve Bank & Trust refused to pay the ransom, leading to the public release of the stolen data.
Evolve Bank & Trust informed its retail bank customers and financial technology partners about the incident and reported it to law enforcement. An update on June 26 confirmed that customers' debit cards, online, and digital banking credentials were not affected. The security breach impacted over 7.6 million individuals, as noted in a data breach notification filed with the Office of the Maine Attorney General. Evolve Bank & Trust identified no new unauthorized activity since May 31, following initial system issues detected on May 29. The bank is working with a cybersecurity firm to investigate the incident and enhance system protections. While no customer funds were accessed, the threat actors downloaded customer information.
