U.S. Bancorp says LockBit claims stem from contractor-related incident
Summary
U.S. Bancorp says LockBit’s data-theft claims relate to a potential fourth-party incident outside its environment. The bank reports no evidence its systems or data were compromised and says it has notified law enforcement; LockBit provided no samples.
Key points
- U.S. Bancorp says the claims relate to a potential incident involving a contractor for a third party, outside the bank’s environment; it did not identify the parties.
- The bank says there is no evidence its systems, networks or data repositories were compromised.
- LockBit listed U.S. Bancorp on its leak site and threatened to publish data in two weeks, but provided no samples to support the claim.
- U.S. Bancorp says it shared information with law enforcement and is monitoring for possible data exposure.
Article Details
- Victim Organization
- U.S. Bancorp
- Incident Type
- Alleged data theft connected to a contractor-related fourth-party incident outside U.S. Bancorp's environment; the bank said its own systems and data repositories were not compromised.
- Operational Impact
- U.S. Bancorp reported no evidence that its systems, networks, or data repositories were compromised. It said it informed law enforcement and was monitoring for possible exposure.
- Ransom Or Extortion
- LockBit added U.S. Bancorp to its leak site and threatened to publish data in two weeks. No ransom demand or supporting samples were reported.
- Claim Status
- claimed