River Financial Corporation Confirms Data Deletion by Ransomware Attackers

River Financial Corporation Confirms Data Deletion by Ransomware Attackers

First seen 3 Aug 2026, 15:20 UTC TheregisterSecurityaffairs.CoScworldTeissteiss.affino.com 87% similarity 51.9

Article Content

Browse articles
ThreatCluster

River Financial Corporation reported that hackers deleted data stolen during a ransomware attack that began on June 16, 2026. The company detected the intrusion three days later and took immediate containment measures, including disabling compromised accounts and taking affected systems offline. They are currently working with a third-party forensic firm to assess the full scope of the breach. Despite assurances from the attackers regarding data deletion, River has not confirmed whether any personally identifiable information was accessed. The company has faced at least four lawsuits related to the incident and continues to investigate the potential impact on its business. River has not disclosed the identity of the threat actor or the method of compromise used in the attack.

Key Points: • River Financial Corporation experienced a ransomware attack starting June 16, 2026. • The company received assurances from attackers that stolen data was deleted. • At least four lawsuits have been filed against River Financial due to the incident.

ThreatCluster AI How this analysis works

Timeline

2026-06-16
Ransomware attack initiated
Unauthorized access to River's network was gained, leading to a ransomware deployment.
Teiss
2026-06-19
Intrusion detected
River Financial Corporation identified the ransomware activity three days after the attack began.
Teiss
2026-06-25
SEC filing on investigation status
River disclosed that the investigation into the breach's scope and impact was ongoing.
Teiss
2026-07-30
Assurances of data deletion received
River obtained confirmations from the attackers that the stolen data had been deleted, though ransom payment details remain unconfirmed.
Securityaffairs.Co
2026-08-04
Investigation ongoing
River Financial Corporation continues to assess the impact of the ransomware attack and has not yet determined the full extent of the breach.
Teiss

Community

Browse all →