Everest Claims Ransomware Attack on Citizens Bank

Summary
An unconfirmed ransomware claim attributed to Everest names Citizens Bank as the victim. The post cites the group's public claim and lists discovery and publication on April 20, 2026; compromise or data theft is not independently confirmed.
Key points
- The record names Citizens Bank and attributes the ransomware claim to Everest.
- It cites an Everest leak-site page and says the record was monitored by ransomware.live.
- The claim was listed as discovered and published on April 20, 2026.
- The post says it cannot confirm the claim's accuracy; it provides no independent evidence of compromise or data theft.
Article Details
- Victim
- Citizens Bank
- Claim Date
- 2026-04-20
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- A claim was listed on the actor's onion site. The article author states they cannot confirm its accuracy; no data publication is reported.
