US Bank investigates LockBit's claims as ransomware crims set pay-or-leak deadline
- ID
- 16237
- Status
- summarized
- Published
- 21 Aug 2026, 1:30 AM
- Fetched
- 21 Aug 2026, 5:01 AM
- Provider
- The Register
- Category
- technology
- Original URL
- https://www.theregister.com/security/2026/08/20/us-bank-investigates-lockbits-claims-as-ransomware-crims-set-pay-or-leak-deadline/5290560
- Source URL
- https://www.theregister.com/headlines.atom
Summary
- Score
- 2.0
- Created
- 21 Aug 2026, 5:02 AM
- Tags
- Audience
- developerssaas_founders
What happened
LockBit claims to have breached US Bank and threatens to leak stolen data on September 3 unless a ransom is paid. US Bank says it is investigating but reports no evidence of unauthorized access to its network. LockBit reemerged in September 2025 with a 5.0 variant after a 2024 law-enforcement takedown, and prior third-party breaches at US Bank already exposed 537 customers' credit card data via Fidelity National Information Services.
Why it matters
This is a banking ransomware extortion story with no direct tie to AI, developer tooling, or Malaysian/SEA infrastructure. Builders in this audience are unlikely to need to change anything based on it unless they operate fintech infrastructure that integrates with US Bank or FIS as a vendor.
Discussion angle
Briefly note as a cautionary example that paying ransomware demands carries no guarantee of data deletion — LockBit was caught retaining victim data even after payment — which is relevant for any SaaS founder writing incident-response or vendor-risk policies.