Share this article on:
Millions have been impacted after LockBit leaked the data of Evolve Bank & Trust last month, according to a new breach notification.
In June, the LockBit ransomware gang threatened to leak the data of the US Federal Reserve, but instead leaked the data of Evolve, an organisation that the Federal Reserve had called out for poor anti-money laundering, risk management and consumer compliance programs.
Evolve quickly confirmed the breach, saying that the data of some of its retail bank customers and financial technology partners’ customers was stolen.
“It appears these bad actors have released illegally obtained data, including personal identification information (PII), on the dark web,” Evolve said.
“The data varies by individual but may include your name, Social Security number, date of birth, account information and/or other personal information.”
Now, according to a release by the Office of the Maine Attorney General, a total of 7,640,112 people were affected by the breach.
Additionally, as pointed out by CyberNews, global money management company Wise also posted a breach notification claiming to have been affected by the Evolve data breach.
“Evolve Bank & Trust is a regulated bank that we worked with from 2020 until 2023 to provide USD account details,” Wise said.
“They’ve recently been affected by a data breach, and some Wise customers’ personal information may have been involved. We’ll be emailing all Wise customers who we think may have been affected by this data breach directly.
“For Evolve Bank & Trust to provide USD account details to Wise customers, they were required to hold identifying information.
“The information that we shared with Evolve Bank & Trust to provide USD account details included name, address, date of birth, contact details, SSN or EIN for US customers, or another identity document number for non-US customers. Evolve has not yet confirmed to us what data has been impacted.”
Wise said it is no longer partnered with Evolve and that it can confirm that details such as account credentials, including passwords, USD account details and Wise card details were not affected.
The company said that as of June last year, over 16 million people and businesses were users of Wise.