U.S. Bank says breach claims related to fourth
LockBit claimed data theft from U.S. Bancorp, but the bank attributes it to a fourth-party breach at a contractor's third party, with no impact on its own systems.
LockBit added U.S. Bancorp to its leak site and threatened to release stolen data within two weeks, but the bank investigated and attributed the claims to a fourth-party incident outside its environment. U.S. Bancorp stated there is no evidence its systems, networks, or data repositories were compromised and reported the matter to law enforcement. The bank is the seventh largest in the United States, and LockBit provided no samples to substantiate the claim. The gang, previously subject to a 2024 law enforcement takedown, earned $252.4 million in ransoms through 353 attacks from 2022 to 2024 according to the U.S. Treasury.
- LockBit listed U.S. Bancorp with two-week leak deadline
- Bank attributes breach to fourth-party contractor incident
- No evidence of compromise in U.S. Bancorp's own environment
- LockBit previously subject to 2024 law enforcement takedown
- Threat actors
- LockBit
- Victims
- U.S. Bancorp
- Organizations
- U.S. Treasury Department
- Countries
- United States
From the original article
2 min read at therecord.media
U. S. Bancorp said recent claims of data theft by a ransomware gang are related to a breach involving a contractor for a third-party, and do not impact its own systems or network.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.