A ransomware claim attributed to the threat actor Everest targets Citizens Bank in the United States. The AI-generated note depicts Citizens Bank as a major American retail and commercial bank with nationwide reach and a wide range of services, while threats of encryption or data exposure accompany the attack. #UnitedStates
Incident Details
- Victim: Citizens Bank
- Sector: Financial Services
- Country: US
- Actor: everest
- Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/Citizens_Bank/
- Discovered: 2026-04-20 02:32:31.509728
- Published: 2026-04-20 02:32:13.089260
Information
- Citizens Bank — major American retail and commercial bank headquartered in Providence, Rhode Island.
- Offers a wide range of financial products: personal and business banking, loans, mortgages, credit cards, and wealth management services.
- Serves millions of customers across the United States through branches, ATMs, and digital banking platforms.
- Reported ransomware incident attributed to threat actor “everest”.
Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.