River Financial Reports Ransomware Incident, Says Some Operations Are Affected

Summary

River Financial reported unauthorized network access around June 16 and ransomware across parts of its server environment. Some operations are affected; the company is investigating potential personal-information exposure and working to restore systems.

Key points

• River Financial said an unauthorized threat actor accessed its network environment on or about June 16, 2026.
• The company identified the activity around June 19 and determined ransomware had been deployed across portions of its server environment.
• River disabled affected administrative accounts and took impacted systems offline as containment measures.
• Some operations were affected, and River is working with external cybersecurity professionals to restore them.
• With a third-party forensic firm, River is investigating whether personally identifiable information was accessed or exfiltrated; the scope and impact remain undetermined.