Security News > 2024 > July > Evolve Bank & Trust confirms LockBit stole 7.6 million people's data

Evolve Bank & Trust says the data of more than 7.6 million customers was stolen during the LockBit break-in in late May, per a fresh filing with Maine's attorney general.

It's the first time Evolve has confirmed the scale of the data theft - which affected at least three of its major partners, past and present - and it expects the number to rise as its investigations continue.

"As for Evolve, its letter to customers reads:"On May 29, 2024, Evolve identified that some of its systems were not working properly.

"Evolve promptly initiated its incident response processes and stopped the attack. No new unauthorized activity on Evolve's systems has been identified since May 31, 2024. An investigation with assistance from a cybersecurity firm was initiated to investigate what happened and what data may have been impacted. Evolve also notified law enforcement and worked to add further protections to harden its systems."

Evolve has offered impacted individuals 24 months of credit monitoring, as is often the case in major data leaks.

This, of course, came just a few weeks after Evolve became aware that LockBit was rummaging through its systems for the best part of four months - a hardly ideal 2024 for the finance firm.

News URL

https://go.theregister.com/feed/www.theregister.com/2024/07/09/evolve_lockbit_attack/