The Washington State Office of the Attorney General disclosed a ransomware attack targeting Automatic Funds Transfer Services Inc. (AFTS) on February 4, 2021, reported publicly on March 17, 2021. The incident compromised the personal and financial data of approximately 695 Washington residents, exposing sensitive information such as names, email addresses, and bank account routing details. The breach stemmed from a malicious cyber intrusion where attackers encrypted AFTS’s systems and exfiltrated customer data, posing significant risks of financial fraud, identity theft, and unauthorized transactions. While the full scope of misuse remains undetermined, the exposure of bank routing information—a critical component for electronic fund transfers—heightens vulnerabilities for affected individuals. The attack underscores the growing threat of ransomware groups targeting financial service providers to exploit payment processing infrastructure. AFTS, a company specializing in automated payment and fund transfer solutions, faced operational disruptions and reputational damage due to the breach. The incident also triggered regulatory scrutiny, with the Attorney General’s office likely mandating corrective measures, including customer notifications, credit monitoring services, and enhanced cybersecurity protocols to mitigate future risks. The breach serves as a stark reminder of the escalating sophistication of ransomware attacks in compromising third-party financial processors.