Days after claiming responsibility for hacking the US Federal Reserve, the Russia-linked LockBit ransomware gang has leaked customer data from Evolve Bank & Trust on the dark web.
In a statement, Evolve confirmed it is investigating a cyberattack, noting that "bad actors" seem to have posted illegally obtained data online.
LockBit published a cache of files across 21 separate links on the dark web after Evolve failed to meet its ransom demands.
Just hours earlier, the gang had claimed to have stolen 33 terabytes of “juicy banking information containing Americans’ banking secrets” from the Federal Reserve.
Though the group did not post the data or proof, they issued a threat to the Fed: “You better hire another negotiator within 48 hours, and fire this clinical idiot who values Americans’ bank secrecy at $50,000.”
For Evolve, this hack follows a regulatory order to improve its risk management and obtain approval before entering new partnerships.
The bank has worked closely with fintechs, including the BaaS platform Synapse. Synapse collapsed earlier this year, stranding many of its partners and causing a dispute with Evolve over client funds.
The Federal Reserve and the Arkansas State Bank Department found deficiencies in Evolve's oversight of partnerships with fintech companies and its anti-money laundering measures