Skip to content
Ransomware Group Storm Targets Multiple U.S. Banks and Credit Union

Ransomware Group Storm Targets Multiple U.S. Banks and Credit Union

First seen 11 Nov 2026, 17:03 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 17:09 UTC

The ransomware group Storm has claimed responsibility for attacks on five U.S. banks and Insight Credit Union, with two institutions confirming breaches. Sawyer Savings Bank reported a data breach affecting 16,069 individuals, where names and Social Security numbers were compromised. Insight Credit Union disclosed a breach affecting 656 Texans, revealing sensitive personal and financial information. The attacks appear to exploit vulnerabilities in managed service providers, with Storm listing the affected institutions on its leak site to pressure them into paying ransoms. The total assets of the affected banks and credit union amount to approximately $6.7 billion. Four of the banks have not publicly confirmed any incidents, and the claims made by Storm may be overstated. The breach at Sawyer was linked to a vendor's systems rather than the bank itself.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 17h ago How this analysis works

Timeline

2026-09-15
Storm claims breach of Insight Credit Union
Storm posted on the dark web claiming to have breached Insight Credit Union, stating they obtained 209 gigabytes of data.
Teiss
2026-11-06
Insight Credit Union discloses breach
The credit union reported a data breach to the Texas attorney general, affecting 656 residents and exposing sensitive information.
Teiss
2026-11-11
Sawyer Savings Bank confirms data breach
Sawyer Savings Bank notified 16,069 individuals about a breach involving their names and Social Security numbers, linked to a vendor's systems.
Americanbanker

More articles in this cluster (5)

Following this threat?

Track StormEncryptor and First Secure Bank Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How many individuals were affected by the Sawyer Savings Bank breach?
The breach at Sawyer Savings Bank affected 16,069 individuals, with their names and Social Security numbers compromised.
What type of data was exposed in the Insight Credit Union breach?
The breach exposed sensitive personal and financial information, including names, Social Security numbers, and financial account details.
Which banks have confirmed breaches?
As of now, Sawyer Savings Bank and Insight Credit Union have confirmed breaches, while four other banks listed by Storm have not publicly acknowledged any incidents.