Evolve Bank & Trust suffered a security breach causing the compromise of personal information. The breach was announced by the LockBit gang, which allegedly exfiltrated 33 TB of sensitive data from the Federal Reserve and leaked documents belonging to Evolve Bank. Certain customers' personal data, including names, addresses, SSNs or EINs, dates of birth, and contact details were involved. The breach affected fintech firms Wise and Affirm, their customers, and potentially undermined the security and trust in Evolve's banking services. Although the bank's core systems like debit cards and digital banking credentials were reportedly not affected, the incident highlights the vulnerability of financial data in the interconnected fintech ecosystem.

Evolve Bank and Trust, a financial institution catering to fintech startups, experienced a ransomware attack alongside a data breach with the potential to affect its customers and those of its fintech partners. A cybercriminal organization obtained and released private data on the dark web. LockBit ransomware group claimed responsibility for the theft and publication of sensitive information, disrupting banking operations, compromising client confidentiality, and undermining trust in Evolve's cybersecurity measures.

The California Office of the Attorney General reported a data breach involving Evolve Bank & Trust on July 8, 2024. The breach was identified on May 29, 2024, when unauthorized activity was detected, leading to the potential exposure of customer information but no confirmed unauthorized access to funds.

The Washington State Office of the Attorney General reported a data breach involving Evolve Bank & Trust on July 8, 2024. The breach, identified as a ransomware cyberattack, occurred between February 9, 2024, and May 31, 2024, potentially exposing the personal information of 275,716 individuals, including names, Social Security numbers, and financial information.