# River Bank obtains assurances from hackers that stolen data was deleted Hackers reportedly deleted data stolen in the June ransomware attack, investigation ongoing. - **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb) - **Published:** 2026-08-03 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/d4bef739-b3d3-423e-b89f-ae45b505c94c ## Attack timeline and detection Unauthorized actors breached River Bank's systems on June 16, 2026. The company discovered ransomware deployed across parts of its server environment three days later. Immediate containment measures included disabling affected admin accounts and taking systems offline. These details appeared in an SEC Form 8-K filing. River is working with a third-party forensic firm to determine the incident's scope. ## Data deletion claims River Bank announced receiving assurances from hackers that stolen data was deleted. However, it remains unclear whether personal data was compromised. The company continues investigating the breach's full impact on operations. The 8-K report emphasized uncertainty about potential financial impacts. An update within four business days was promised. ## Outstanding questions The attackers' identity and intrusion methods remain unknown. River Bank is still assessing financial impacts. Personal data exposure hasn't been confirmed. While hackers provided deletion assurances, risks of data misuse persist. Such breaches often cause reputational damage for financial institutions. ## Regulatory disclosures River Financial Corporation filed two Form 8-K reports with the SEC. The initial filing detailed attack detection and containment measures. The subsequent report mentioned obtaining hacker assurances about data deletion. Financial institutions must promptly report cybersecurity incidents, though incomplete disclosures may heighten customer concerns. ## Industry-wide vulnerabilities Financial institutions face particular ransomware risks. Global financial sector cyberattacks increased 38% in 2023. The River Bank case demonstrates post-breach crisis management importance. While controversial, obtaining deletion assurances represents a risk mitigation strategy, though verification remains challenging. ## Customer data status River Bank hasn't confirmed whether personal data was exposed. Financial institutions store sensitive information including account details and credit histories. Such breaches increase identity theft risks. The lack of customer notifications may reflect the company awaiting clearer findings. Regulators typically require disclosure within 72 hours. ## Forensic investigation role River Bank collaborates with a third-party forensic firm. Post-attack forensic analysis is crucial for determining intrusion sources and impacts. This process involves log examination, data trail tracking, and damage assessment. Comprehensive investigations may take weeks, especially with data-encrypting ransomware. Forensic teams map attacker movements within systems. ## Cybersecurity lessons The River Bank incident highlights needed security investments in financial institutions. 60% of attacks exploit vulnerabilities. Measures like multi-factor authentication and patch management reduce risks. Updated incident response plans prove critical. River's engagement with hackers presents ethical and legal dilemmas in breach scenarios. ## Sources covering this story - https://securityaffairs.com/196537/cyber-crime/river-bank-obtained-assurances-from-the-attackers-that-the-stolen-data-in-the-june-attack-was-deleted.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._