{
  "id": 18826,
  "title": "US bank places trust in ransomware crew that promised to delete its data",
  "url": "https://urgent.news/2026/07/31/us-bank-places-trust-in-ransomware-crew-that-promised-to-delete-its-18826",
  "topic": "world",
  "section": "World",
  "published": "2026-07-31T15:41:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/07/31/us-bank-places-trust-in-ransomware-crew-that-promised-to-delete-its-data/5281888"
  },
  "original_language": "en",
  "account": "River Financial Corporation's confidence in a ransomware group to erase stolen data has raised eyebrows among regulators. Over a month into the cleanup process, the bank disclosed to authorities that it had taken steps to attempt to remove the affected data, citing assurances from the threat actor regarding data deletion. However, this approach has been deemed unwise in the past, as evidenced by the 2024 takedown of LockBit, where evidence showed that victim data was retained even after ransom payments. The bank has not confirmed whether it paid the ransom, a common practice among cybercriminals. River Bank initially informed the Securities and Exchange Commission (SEC) on June 16 about the ransomware attack, leading to the immediate isolation of infected systems and deployment of external forensic experts to assess the damage. A day later, they acknowledged potential data impact, followed by confirmation by July 10. Despite these developments, the bank has not fully investigated the attack and has thus far not disclosed the complete extent of the incident.",
  "summary": "History suggests this was not wise",
  "key_points": [
    "River Financial Corporation trusts ransomware crew to delete stolen data.",
    "Bank disclosed ransomware attack to SEC on June 16.",
    "Potential data impact confirmed by July 10, but full extent undisclosed."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "US bank places trust in ransomware crew that promised to delete its data",
        "url": "https://urgent.news/2026/07/31/us-bank-places-trust-in-ransomware-crew-that-promised-to-delete-its",
        "published": "2026-07-31T15:41:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}