River Bank Says Ransomware Actor Represented Stolen Data Was Deleted
Summary
River Financial says a ransomware attack led to network access and data exfiltration. The company says the actor represented that it deleted the data, but whether personal information was stolen remains undetermined.
Key points
- The ransomware attack occurred June 16 and was identified three days later.
- River said ransomware was deployed across portions of its server environment.
- The company took affected systems offline and disabled compromised administrative accounts.
- Subsequent SEC filings disclosed network access and exfiltration of certain data; the investigation is ongoing.
- River has not determined whether personal information was stolen.
- River said it obtained representations from the threat actor that the data had been deleted; a ransom payment is not confirmed.
Article Details
- Victim Organization
- River Financial Corporation (holding company behind River Bank & Trust)
- Incident Type
- Ransomware attack involving unauthorized network access and data exfiltration
- Data Types Exposed
- Unspecified data; whether personally identifiable information was accessed or exfiltrated remains undetermined
- Operational Impact
- Ransomware was deployed across portions of River's server environment. River took affected systems offline and disabled compromised administrative accounts. The company had not determined whether the incident was reasonably likely to materially affect its business or financial condition.
- Ransom Or Extortion
- River said it obtained representations from the threat actor that the stolen data had been deleted. The article says engagement with the hackers may have resulted in a ransom payment, but a payment was not confirmed.
- Claim Status
- confirmed