PANews reported on July 2 that according to Protos, the crypto-friendly bank Evolve Bank and Trust recently admitted that although it had discovered "unauthorized activities" as early as a month ago - specifically 33 TB of user data was stolen, it did not publicly report the matter until last week. The bank said that the data leak was caused by employees accidentally clicking on malicious links, and the attack was blocked within a few days, and no subsequent unauthorized activities were found. It also did not pay the ransom demand and said that Lockbit mistakenly attributed the data to the Federal Reserve.
The data leak was allegedly carried out by the Russian ransomware gang Lockbit, and the leaked information included personal details of users such as Bitfinex. The report pointed out that Evolve Bank did not promptly notify the affected fintech companies or end users after learning about the data leak, and did not take action until the incident was made public last week. This delayed notification has aroused widespread concern and doubts in the industry. In addition, the report said that the data stolen from Evolve Bank included personally identifiable information (PII) such as name, address, social security and tax ID number, date of birth, account balance and email address. The data reportedly came from 155,586 accounts associated with companies such as Bitfinex, Nomad and Copper.
