River Financial Corporation, the bank holding company behind River Bank & Trust, says it received confirmation that data stolen in a ransomware attack was deleted.
The attack occurred on June 16 and was identified three days later. River’s investigation into the incident determined that ransomware was deployed across portions of its server environment.
In response, the company took the affected systems offline and disabled administrative accounts that had been compromised.
“River, with the assistance of a third-party forensic firm, is investigating the nature and scope of the incident, including whether any personally identifiable information was subject to unauthorized access or exfiltration,” the company said in a June 25 filing with the US Securities and Exchange Commission (SEC).
Subsequent 8-K forms filed with the SEC revealed that hackers accessed portions of River’s network and exfiltrated certain data and that at least four lawsuits have been filed against the company.
The investigation into the nature, scope, and impact of the incident, however, continues, and a July 30 filing shows that River has yet to determine if the hackers stole any personal information from its systems.
The filing’s wording, however, shows that the company has engaged with the hackers to have the stolen data deleted, likely as the result of a ransom payment.
“As part of its response, River took steps to attempt to suppress the affected data, including obtaining representations from the threat actor that it deleted the data in its possession,” River said.
The company has not shared details on the threat actor responsible for the incident, and it is unclear how the attackers compromised its network.
“River has not yet confirmed whether the incident is reasonably likely to materially impact its business or financial condition,” the company said.
SecurityWeek has emailed River for additional details on the ransomware attack and will update this article if the company responds.
Related: Brinks Home Discloses Data Breach as Hackers Leak Files
Related: Origin Energy Data Breach Affects 900,000 Australians
Related: Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
Related: DentaQuest Data Breach Potentially Impacts Over 23 Million People
