
Ransomware crew claims 5 banks and a CU; 2 confirm breaches - American Banker
A ransomware group has claimed responsibility for attacks on five U.S. banks and one credit union, with two institutions confirming breaches that affected thousands of customers.
The Storm ransomware group has publicly claimed responsibility for cyberattacks targeting five U.S. banks and one credit union, with two institutions confirming breaches that forced temporary closures and exposed sensitive customer information. Sawyer Savings Bank, a $285 million institution based in Saugerties, New York, closed its branches for a week in August after a breach at the firm managing its IT systems.
Customer Data Compromised
The breaches have resulted in significant exposure of personal customer data. Sawyer Savings Bank notified 16,069 individuals that their names and Social Security numbers were compromised, according to a breach report filed with the Indiana attorney general's office.
Financial Impact
The targeted institutions collectively hold approximately $6.1 billion in assets, according to the ransomware group's claims. Four of the five banks have not yet publicly confirmed or denied whether they experienced security incidents, leaving the full extent of the attacks unclear.