River Financial Confirms Data Exfiltration in Ransomware Attack; Two Class Actions Filed

summarizeSummary

River Financial's investigation into the June ransomware attack found that a threat actor accessed and removed data from its network. Two class action lawsuits have been filed, and the company has not yet determined whether the incident will materially impact its business.

check_boxKey Events · Legal and Risk Events · RVRF

• Data Exfiltration Confirmed

  Investigation found an unauthorized threat actor accessed portions of River's network and removed certain data; the nature and scope of the information involved, including whether personally identifiable information was affected, is still being determined.

• Class Action Lawsuits Filed

  Two class action lawsuits have been filed against River relating to the incident; the company is evaluating the complaints and expects to respond in ordinary course, with additional claims or litigation possible.

• Uncertain Financial Impact

  River has not yet confirmed whether the incident is reasonably likely to materially impact its business or financial condition; an amendment will be filed within four business days after such determination is made.

• Ongoing Investigation

  The full nature, scope, and impact of the incident remain undetermined as of the filing date, with River continuing to assess the situation.

auto_awesomeAnalysis · RVRF · Finance

This amendment to the original ransomware disclosure reveals that an unauthorized actor removed data from River's network, escalating the incident from a network disruption to a potential data breach. Two class action lawsuits have already been filed, adding legal risk. The company still cannot determine the full impact, leaving significant uncertainty for investors.