Evolve Bank & Trust

Disclosed Jun 26, 20247,640,112 affectedConfirmed

LockBit ransomware attack on Evolve Bank exposes data of 7.6 million people

Evolve Bank & Trust said LockBit ransomware actors downloaded customer data in February and May 2024, affecting most of its personal banking customers and customers of fintech partners such as Wise, Affirm and Mercury. TechCrunch reported Evolve later confirmed about 7.6 million people were affected.

What is known

People affected	7,640,112 (as reported by the organization)
Disclosed	Jun 26, 2024
Discovered	May 29, 2024
Happened	Feb 9, 2024
Attack	Ransomware
Data exposed	NamesCredentials and tokensSocial Security numbersDates of birthFinancialPhone numbersEmailsAddressesEmployment
Sector	Finance · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Evolve Bank & Trust

Official noticeatg.wa.gov

Washington Attorney General breach notice: Evolve Bank & Trust

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Evolve Bank and Trust

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Evolve Bank & Trust

Regulatoroag.ca.gov

California AG breach notice: Evolve Bank & Trust

Newstechcrunch.com

A timeline of ransomware in 2024

The organizationgetevolved.com

Cybersecurity Incident - Evolve Bank & Trust

Official noticein.gov

Indiana Attorney General 2024 data breach report: Evolve Bank & Trust

Notices filed

TotalJun 26, 2024

Research7,600,000 people

Residents of CAJul 8, 2024

California AGCount not stated

Residents of WAJul 8, 2024

Washington AG275,716 people

Residents of DEJul 8, 2024

Delaware DOJ27,417 people

Residents of ORJul 8, 2024

Oregon DOJ64,904 people

Residents of INJul 8, 2024

Indiana AG149,930 people

History of this record

records2026-09-25

7600000 to 7640112by backfillSource

data_types2026-09-25

["names","credentials"] to ["names","credentials","ssn","dob","financial","phone","emails","addresses","employment"]by seedSource

records2026-09-25

7640112 to 7600000by seedSource

disclosed2026-09-25

2024-07-08 to 2024-06-26by seedSource

summary2026-09-25

empty to Evolve Bank & Trust said LockBit ransomware actors downloaded customer data in February and May 2024, affecting most of its personal banking customers and customers of fintech partners such as Wise, Affirm and Mercury. TechCrunch reported Eby seedSource

title2026-09-25

empty to LockBit ransomware attack on Evolve Bank exposes data of 7.6 million peopleby seedSource

data_types2026-09-25

[] to ["names","credentials"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 7640112by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2024-05-29by backfillSource

occurred2026-09-25

empty to 2024-02-09by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Evolve Bank & Trust