news.bgov.com Chime Faces Lawsuits After Alleged Iran-Linked Cyberattack
Article Content
- •Chime Financial's app outage on April 1, 2026, was linked to a cyberattack by Team 313.
- •Three lawsuits allege that sensitive customer data was compromised, despite Chime's denials.
- •Chime has not filed a cybersecurity incident notice with the SEC as of May 4, 2026.
On April 1, 2026, Chime Financial's mobile app experienced a significant outage attributed to a cyberattack by the pro-Iranian hacker group Team 313. Customers reported being unable to access their accounts, leading to concerns over potential data theft. Three proposed class action lawsuits have been filed in the U.S. District Court for the Northern District of California, alleging that Team 313 breached Chime's systems and stole sensitive personal information, including Social Security numbers and government-issued IDs. Chime has publicly stated that no data was stolen during the incident. Despite the claims, no evidence of a breach has been presented beyond existing public knowledge. The outage resulted in over 6,600 user reports on DownDetector, indicating widespread impact. As of May 4, 2026, Chime has not filed a material cybersecurity incident notice with the SEC, raising questions about the company's assessment of the incident's severity. Customers have expressed frustration and anxiety over the lack of access and potential data compromise.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track 313 Team Hacking Team and Chime in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…