Evolve Bank & Trust
Disclosed Jun 26, 20242 years ago7,640,112 affectedConfirmed
LockBit ransomware attack on Evolve Bank exposes data of 7.6 million people
Evolve Bank & Trust said LockBit ransomware actors downloaded customer data in February and May 2024, affecting most of its personal banking customers and customers of fintech partners such as Wise, Affirm and Mercury. TechCrunch reported Evolve later confirmed about 7.6 million people were affected.
What is known
| People affected | 7,640,112 (as reported by the organization) |
|---|---|
| Disclosed | Jun 26, 2024 |
| Discovered | May 29, 2024 |
| Happened | Feb 9, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Credentials and tokens, Social Security numbers, Dates of birth, Financial, Phone numbers, Emails, Addresses, Employment |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Evolve Bank & Trustoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Evolve Bank & Trustatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Evolve Bank and Trustattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Evolve Bank & Trustjustice.oregon.gov · Official notice | Official notice |
| California AG breach notice: Evolve Bank & Trustoag.ca.gov · Regulator | Regulator |
| A timeline of ransomware in 2024techcrunch.com · News | News |
| Cybersecurity Incident - Evolve Bank & Trustgetevolved.com · The organization | The organization |
| Indiana Attorney General 2024 data breach report: Evolve Bank & Trustin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 26, 2024 | 7,600,000 |
| California AGresidents of CA | Jul 8, 2024 | |
| Washington AGresidents of WA | Jul 8, 2024 | 275,716 |
| Delaware DOJresidents of DE | Jul 8, 2024 | 27,417 |
| Oregon DOJresidents of OR | Jul 8, 2024 | 64,904 |
| Indiana AGresidents of IN | Jul 8, 2024 | 149,930 |
History of this record
- 2026-09-25 · records: 7600000 to 7640112 · backfill source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","ssn","dob","financial","phone","emails","addresses","employment"] · seed source
- 2026-09-25 · records: 7640112 to 7600000 · seed source
- 2026-09-25 · disclosed: 2024-07-08 to 2024-06-26 · seed source
- 2026-09-25 · summary: empty to Evolve Bank & Trust said LockBit ransomware actors downloaded customer data in February and May 2024, affecting most of its personal banking customers and customers of fintech partners such as Wise, Affirm and Mercury. TechCrunch reported E · seed source
- 2026-09-25 · title: empty to LockBit ransomware attack on Evolve Bank exposes data of 7.6 million people · seed source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 7640112 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-05-29 · backfill source
- 2026-09-25 · occurred: empty to 2024-02-09 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.